last executing test programs: 1m25.815280517s ago: executing program 3 (id=1780): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000064000000070000000c0000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xffe0, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xda}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x34}]}}]}, 0x44}}, 0x40054) 1m25.545393364s ago: executing program 3 (id=1786): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=0x0], 0x48) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffff001}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02009df7ffd3f53b81c16f9d7bd3d2cd8cab7025c48022fdd300000000000000000000000000000000d056d0b4b6bd3af2d03abaa50c16c42de8cc7d9954a952921bc3408a572f2b8f80147611ceb4f0eac62faa98a43eeb1ce02d0eae5d037b62be92408dffbaef475e05f3037dd5800d268b42053e03def164cb91dfa89c7c986920e868c0434079ed6905d6d0c097040819ede0bb468252c2a81bbe9ade94742b78e007908d1ef27b8b777d4e28fbff75374a", @ANYRESOCT=r7], 0x48) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='2\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25280000000a0001007770616e3300000005002e00060000000c002d00000000000000000006000400a0aa0000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004004}, 0x810) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x18, &(0x7f00000008c0)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYBLOB="8000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030800000095000000000000000000003ac6cb7a7b531b08adeedc0c7483de3eafa5d88e23eb63102487a7b07b2ed22a499c03e8f0a15a5b502f244ecb311b851c9ca475d806348b9c97c2d41df92f4282aa2328099d27f35b"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x18) r10 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x9, 0x40000000000000a, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000000)='cpu~=0||!') r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r11) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfe5e) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) 1m25.387083149s ago: executing program 3 (id=1793): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) write$binfmt_script(r3, &(0x7f0000000800)={'#! ', './file0/file0'}, 0x11) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r2, r3, 0x0) 1m25.328144905s ago: executing program 3 (id=1795): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000100)={[{@nombcache}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@grpjquota}]}, 0x3, 0x44a, &(0x7f00000006c0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000095000000000000000000a9ad9797b4fe71d5f15c8ee930ad4cb9de3943002832dc7d47da0a4a78842b1dc0609926faac9accc913f8d04dfaf0d8c876abc8819e32d6a282d98529bce35ebde1bae4ab9266a8b0f2378527af181f982e61d7219606e95e172ee6b5c9ad4b01f0700f2d81682000"/133], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x23, &(0x7f0000000000)={0x1}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x84, 0x80, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0x5, 0x2, 0x2, 0x5}, &(0x7f0000000400)=0x98) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4212, r3, 0x201, &(0x7f0000000240)={0x0}) sched_setscheduler(r3, 0x3, &(0x7f0000000080)=0x4041) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x2000)=nil) 1m25.117138816s ago: executing program 3 (id=1800): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) close(r0) 1m25.052739702s ago: executing program 3 (id=1802): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x28f, &(0x7f0000001600)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "aa6159", 0x259, 0x4, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@srh={0x67, 0xa, 0x4, 0x5, 0x2, 0x0, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @rand_addr=' \x01\x00', @mcast2]}, @dstopts={0x32, 0x10, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x9, [0x2, 0x4]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xe27c}, @padn, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0xac91, [0x3, 0xf, 0x1, 0x4, 0x7, 0x9]}}, @jumbo={0xc2, 0x4, 0x80000001}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x8, 0x0, '\x00', [@pad1]}, @routing={0x2c, 0x8, 0x0, 0xce, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2]}, @routing={0x10, 0x8, 0x2, 0x5, 0x0, [@loopback, @loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1f}]}], "e1118b7c6a686804eca51006802f2a31489b9affa0455a9df2f1a3ed7ecde2202a0f19b1a3a053a2cf41c5889a321520d7842ff004a70f1ccf4a5aa6eb2241a201a793ca732d5fff6d90f1cbb84b55ff30126cded182f1737ffad781b9ccc507efb83b444e8dde8d5e5c650dde4d274168c20971f565a1b10b41a267ed91c6119514668a031ae790e8a34b66d8af0df79fdfbf2bf40abf6ebc846b4af6fb754b908d62c20bde34bc00a65027026e12c23246f56f1e8ba0636c92439c24c166582d981ffccf13be6d7a4eee69a591ea84a1"}}}}}, 0x0) 1m25.008460597s ago: executing program 32 (id=1802): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x28f, &(0x7f0000001600)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "aa6159", 0x259, 0x4, 0xff, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@srh={0x67, 0xa, 0x4, 0x5, 0x2, 0x0, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2, @rand_addr=' \x01\x00', @mcast2]}, @dstopts={0x32, 0x10, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x9, [0x2, 0x4]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xe27c}, @padn, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0xac91, [0x3, 0xf, 0x1, 0x4, 0x7, 0x9]}}, @jumbo={0xc2, 0x4, 0x80000001}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @mcast1}]}, @hopopts={0x8, 0x0, '\x00', [@pad1]}, @routing={0x2c, 0x8, 0x0, 0xce, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2]}, @routing={0x10, 0x8, 0x2, 0x5, 0x0, [@loopback, @loopback, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1f}]}], "e1118b7c6a686804eca51006802f2a31489b9affa0455a9df2f1a3ed7ecde2202a0f19b1a3a053a2cf41c5889a321520d7842ff004a70f1ccf4a5aa6eb2241a201a793ca732d5fff6d90f1cbb84b55ff30126cded182f1737ffad781b9ccc507efb83b444e8dde8d5e5c650dde4d274168c20971f565a1b10b41a267ed91c6119514668a031ae790e8a34b66d8af0df79fdfbf2bf40abf6ebc846b4af6fb754b908d62c20bde34bc00a65027026e12c23246f56f1e8ba0636c92439c24c166582d981ffccf13be6d7a4eee69a591ea84a1"}}}}}, 0x0) 59.412507292s ago: executing program 2 (id=2359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffff74b}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="d00000000109030000000000000000000a00000908000640000000000c00048008000140fffffffc080003400000000408000640000000012c0002000c00028005000100840000001400018008000100ac1414bb080002007f000001060003400000000008000640000000005c0002000c000280050001008800000006000340000300000c00028005000100210000002c00018014000300ff01000000000000000000000000000114000400fe80000000000000000004000000000000000280050001000100000008000540000000174be45c0c5dfbafd31b0ddca620f334e0d03eb63cebe8708851306ff278b445400b1b010478eeed94c9f4e9315428676ffb3c1e535422e1fc658c017149f6700e6368fcdbcbcf993c3cfe1471b60c738ad1898705501d5722872241c234e581300456a2782f3c225b2fdbc139ce5bf9c0f463d471c3a515ac3518c7fc4a"], 0xd0}, 0x1, 0x0, 0x0, 0x30000001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 59.319524462s ago: executing program 2 (id=2361): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "000000000200", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e0003f100000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000800)={'#! ', './file0/file0'}, 0x11) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r2, 0x0) 59.214211442s ago: executing program 2 (id=2366): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000001300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x2000c10, &(0x7f00000008c0)={[{@barrier_val={'barrier', 0x3d, 0x7f}}, {@inlinecrypt}, {@nolazytime}, {@barrier_val={'barrier', 0x3d, 0x200}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0xba0}}]}, 0xff, 0x250, &(0x7f0000000e00)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a40000000060a010400000000000000800200000014000480100001800a0001006d617463680000000900010073797a30000000000900020073797a3200"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x7a2a, 0x9, 0x5e}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x22, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r4}, 0x18) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') shutdown(r2, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0xf07b0a19f4331813) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES8=r0, @ANYRESDEC=r4, @ANYBLOB="2f164399e4116145133ca392a69ec050acf6fb935a9ebc5270e73d3ab60c9d1239661527e370529d02a4b3393f3323def35a28ef5132114504750923e3159cbd5ede981e4d0fdfd523c96f327dd534a8ac9030de02292fd6f9b8321c4e29df4ca2", @ANYRES8=r3, @ANYRESOCT=r5, @ANYRES8=r3, @ANYRES64=0x0, @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x3, &(0x7f0000000100)=0x0) io_getevents(r7, 0x2, 0x2, &(0x7f0000000340)=[{}, {}], 0x0) io_pgetevents(r7, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) io_submit(r7, 0x1, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x101, r8, 0x0, 0x0, 0x4}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0xe420872b3f4a83ac, &(0x7f0000000980)={[{@grpjquota}, {@quota}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@orlov}, {@block_validity}, {@data_journal}, {@quota}, {@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@nodelalloc}, {@resuid}, {@barrier}, {@dax_never}]}, 0x4, 0x58b, &(0x7f00000013c0)="$eJzs3d9rW+UbAPDnpO26X9/vOhhDvZDBLpzMpWs7dYKweSk6HOj9DG1WR9NlNOlY62DbhQPxRoYg4kD8A7z3cgje6l8x0MGQUfTCm8pJT7q0SZq2y5Zu+XzgpO97TpL3PHnP8/Y9OQkJoG8dSW9yES9HxNdJxIGGbYO12+HV+tKj65PpksTy8sd/JZFk6+rbk+zvvqzyUkT88kXE8Vxzu5WFxZlCqVScy+qj1dkro5WFxROXZgvTxeni5fGJidNvToy/8/ZbXYv19fP/fPfRvfdPf3V06dufHhy8k8TZ2N8QWxeauNlYORJHstdkKM6uu+NYFxrbSZJe7wDbMpDl+VCkY8CBGMiyHnjx3YiIZaBPJfIf+lR9HlA/t+/SefBz4+F7KydAzfEPrrw3Ertr50Z7l5I1Z0bp+e5IF9pP2/j5z7t30iU6vA9xowvtAdTdvBURJwcHm8e/JBv/tu9k7Z3lja1vo9/+/0Av3UvnP2+0mv/kVuc/0WL+s69F7m5H5/zPPehCM22l8793W85/V4eukYGs9r/anG8ouXipVDwZEf+PiGMxNJzWN7qec3rp/nK7bY3zv3RJ26/PBbP9eDA4vPYxU4Vq4UlibvTwVsQrj+e/STSN/7trc931/Z++HufTwm9fdmzjcPHuq+22dY6/0Y2VCxVdtPxjxGst+//xFa1k4+uTo7XjYbR+VDT7+/bh39u1v7X4uy/t/70bxz+SNF6vrWy9jR92/1tst227x/+u5JNaeVe27lqhWp0bi9iVfNi8fvzxY+v1+v3T+I8d3Xj8a3X874mITzcZ/+1Dt9fc9bOBVvHvydY8+/6f2lL/b71w/4PPv49IbrZqf3P9f6pWOpat2cz4t9kdfNLXDwAAAAAAAHaSXETsjySXXy3ncvn8yuc7DsXeXKlcqR6/WJ6/PBW178qOxFCufqX7QMPnIcayz8PW6+Pr6hMRcTAivhnYU6vnJ8ulqV4HDwAAAAAAAAAAAAAAAAAAADvEvjbf/0/9MdDrvQOeurU/+T3cs/0Anr2OP/nfjV96AnakjvkPvLDkP/Qv+Q/9S/5D/5L/0L/kP/Qv+Q/9S/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAV50/dy5dlpceXZ9M61NXF+ZnyldPTBUrM/nZ+cn8ZHnuSn66XJ4uFfOT5dlOz1cql6+Mjcf8tdFqsVIdrSwsXpgtz1+uXrg0W5guXigOPZOoAAAAAAAAAAAAAAAAAAAA4PlSWVicKZRKxbl+L5z6te2mM7Ej9nDbhaRTL5/JDoYtPXNkhcHeB6jwFAo9HpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMF/AQAA//+g3y/E") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) 58.154638496s ago: executing program 2 (id=2371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'wlan1\x00', @multicast}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x20c0, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171cdea3e9b48b00", "f28359738e229a4c6681b4a2988e00d300e6c202000000000000000000000001", [0x204, 0x5]}) truncate(&(0x7f00000001c0)='./file1\x00', 0x200) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80001, 0xd1) writev(r6, 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000040), 0x4a00) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='f2fs_destroy_extent_tree\x00', r7, 0x0, 0x800000}, 0x18) r8 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4c840}, 0x4000001) 57.657453105s ago: executing program 2 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pause() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000100)={0x1, 0x21, 0x1b, 0xb, 0x2d, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c001280090001005c6c616e000000000c000280060001080005000000000000", @ANYRES32=r6, @ANYBLOB="0800040006000000"], 0x4c}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4040) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140005"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf250600000008000300", @ANYRES32=r10, @ANYBLOB="050053000000000008000505000000000000000001000000050053000000000078d2bf5b7c1f51eca7ac461ab9ad3170a28800007bdfd77025df32e481fee91b833bf31411e123752ca59d31b50e4cb62e166213c5c6748969b7fd81642fea159f6ca50edf0adae6bf079b114cb1ba983412180afcb6002275c4aed5a9b585ccdfea4ea0a72ec5b2a6717bd81a537a38f90000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="580100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000203b000000", @ANYRES32=0x0, @ANYBLOB="d84c5a9c6c1387a0cebb934c861b39c25799129975ce1ad59f0c850982ac1b939f9d9438c4f6f093b354fd46ad300f90b8dcb4d8cc3a6473b729719caf291345289fbde3a6c88882154e7b26830f9a3b63489d6566d28d8c42877cf4fa5212c9ee152096874c4be3d55d513883f37505a0b12d678f86c0a2f3baddc317dfdd1927a52256e9e1876ec2b93c244671dcac6d0c29f5264f9b65c5baae4c41a73aa15a2f35", @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x20044001) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT], 0x50) r12 = syz_open_pts(0xffffffffffffffff, 0x101000) dup3(r12, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000580)=""/65, 0x41}], 0x7, 0xe, 0x3, 0x12) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000000)={0x7, 0xfffc, 0x1, 0x0, 0x5, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) 55.55825164s ago: executing program 2 (id=2437): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) close(r0) 55.535508542s ago: executing program 33 (id=2437): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) close(r0) 52.2838814s ago: executing program 4 (id=2516): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c010000170a010200000000000000000200000514000380080002400000000708000240000000400900020073797a32000000000c0005400000000000000004ec0003800800014000000000080002400000000668000380140001006772653000000000000000000000000014000100776730000000000000000000000000001400010073797a5f74756e0000000000000000001400010070696d726567000000000000000000001400010076657468305f746f5f687372000000000800014000000000540003801400010076657468315f766c616e0000000000001400010070696d7265673000000000000000000014000100626174616476300000000000000000001400010070696d726567300000000000000000000800024000000e220400039610ceeb400000000a090001"], 0x15c}, 0x1, 0x0, 0x0, 0x44080}, 0x4809c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 52.239503015s ago: executing program 4 (id=2519): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e008015"], 0xa8}}, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0x7}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, 0x0, 0x281c2, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r7}) (fail_nth: 2) 52.031259455s ago: executing program 4 (id=2521): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) mq_open(&(0x7f0000000240)='GPL\x00', 0x40, 0x80, &(0x7f0000000280)={0x7, 0x2, 0xffffffff, 0x8}) 51.997608529s ago: executing program 4 (id=2524): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x30000, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) getrlimit(0x8, &(0x7f0000000b40)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0xee0000b0}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000164f7ff4ee73d3d1001624c51990c40d6d6330661e210ccaf23cef2478ee6e7deb3c0cf779d7d4ae8d5d146fb946ba9cfaf9d205db985ec8950fd7c35f7445413b76704682f389d2645f2d61cc6920e9aa9302cd41f8350ebb60f3746bad4bb806846976a0ed85218603311d4deb07416e8f5b7dad9632ff737e3fa9ac", @ANYRES16=r5, @ANYBLOB="99742dbd7000fbdbdf2515000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) timerfd_create(0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x10, r7) ptrace$getsig(0x4202, r7, 0x9, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x6, 0xf9, 0xf7, 0x61, 0x0, 0x4137, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x401, 0x8}, 0x4040, 0x81, 0x9, 0x3, 0x93ca, 0x3, 0x0, 0x0, 0xf, 0x0, 0x6}, r7, 0x7, r0, 0x8) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x79) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x109e994, &(0x7f0000000340)={[{@barrier}, {@grpquota}, {@mblk_io_submit}, {@jqfmt_vfsv1}, {@mblk_io_submit}, {@nomblk_io_submit}, {@usrjquota}, {@errors_remount}, {@nomblk_io_submit, 0x32}]}, 0x1e, 0x4f3, &(0x7f00000017c0)="$eJzs3dFrW18dAPDvTZuf3daf6dCHOXAON2mHLmlXtxUfpoLo00Cd77O2aSlNm9Kk21qGdvgHCCIq+OSTL4J/gCL7E0QY6LuoKKKbPgjqIvcm2bouXTqXJrX5fOA0557cm+85N83JPfcebgIYWhcj4lJEPG80GlciotAqz7VS7DZTut6zpw8X0pREo3Hnr0lE0ixLV5va85pnWpuNRcRXvxTxjeT1uLXtndX5SqW82Vou1dc2SrXtnasra/PL5eXy+uzszI25m3PX56Z70s7xiLj1hT9+/zs/+eKtX37q/u/u/nnqm0mrPOJlO3qt2fR8ti/aRiNi8yiCDcho1kIAAP4ftI/zPx4RV6IQI9nRHAAAAHCSND47Hv9OIhoAAADAiZXL5sAmuWJrHsB45HLFYnMO74fjdK5SrdU/uVTdWl9szpWdiHxuaaVSnm7NFZ6IfJIuz2T5l8vX9i3PRsTZiPhe4VS2XFyoVhYHffIDAAAAhsSZfeP/fxSa4/89/jWwygEAAAC9MzHoCgAAAABHzvgfAAAATj7jfwAAADjRvnz7dpoa7d+/Xry3vbVavXd1sVxbLa5tLRQXqpsbxeVqdTm7Z99at9erVKsbn471rQelerlWL9W2d+6uVbfW63dXXvkJbAAAAKCPzn7s8W+TiNj9zKkspd4bdKWAvhh9m5X/cHT1APpvZNAVAAbmrb7/gRMlP+gKAAOXdHn+wMk7v+p9XQAAgKMx+ZHO1/9Hup4b2M31qYrAEXH+D4aX6/8wvFz/h+GVj5EwkIfh1u0WoGMHjRUOff2/0XjrSgEAAD01nqUkV4zIzgOMRy5XLEa8n40J8snSSqU8HREfjIjfFPIfSJdnsi2TrnOGAQAAAAAAAAAAAAAAAAAAAAAAAICmRiOJRhebXdcAAAAAjrOI3J+S7G7+EZOFy+P7zw+8l/yzkD1GxP0f3fnBg/l6fXMmLf/bi/L6D1vl1wZxBgMAAADYrz1Ob4/jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCXnj19uNBO/Yz7l89HxESn+KMxlj2ORT4iTv89idE92yURMdKD+LuPIuJcp/hJWq2YaNWiU/xTA45/pgfxYZg9Tvufz3X6/OXiYvbY+fN3I+uh3l3n/q9RSOO3+7+RDvHTsvcPGeP8k5+VDoz/KOL8aOf+px0/OaD/uXTI+F//2s7OKwUXf/Ei2/hxxGTH75/klVil+tpGqba9c3VlbX65vFxen52duTF3c+763HRpaaVSbv3tGP+7H/358ze1//QB8Se6tP/yIdv/nycPnn6omc2/2Dx5GX/qUuf/v3N74+95vVzr/f9EK58+P9nO7zbze1346a8vvKn9iwe0v9v7P3XI9l/5yrd/f8hVAYA+qG3vrM5XKuXNoc68095ID4uORSuOZybdr//75mNHWsNv7S1JevNxSI/Mj8eef7fMQLslAADgCLw+BgYAAAAAAAAAAAAAAAAAAAD6rR+3E8vvi7mb/e3F3fMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrnvwEAAP//RrjPpA==") mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 51.685587169s ago: executing program 4 (id=2530): newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x7100, 0x7ff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x18, &(0x7f0000000040), 0x1, 0x0, 0x31}, 0x8000) 51.417402925s ago: executing program 4 (id=2531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xd8, 0x1403, 0x10, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="08000600000000000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 51.400335587s ago: executing program 34 (id=2531): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0xd8, 0x1403, 0x10, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="08000600000000000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 1.609778832s ago: executing program 5 (id=3557): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0xfffffd75) close_range(r0, 0xffffffffffffffff, 0x0) 1.335879729s ago: executing program 5 (id=3563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) listen(r0, 0x5) r4 = accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), r5) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, r6, 0x221, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x44010}, 0x4001) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000225bd7000fbdbdf250500000024000680060005004e2300000500020007000000060005004e20000008000300ac1414aa08000400030000000500050076000000ba077748d485286cf2c9c14b0b1d7a85b617f2d5dcbc1691856e5160b36097fcd2bd1e1cad5178f64468a240a2d45dfa07d6091e4f4e6289cdfcd1fbc748ff"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="541a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000026200"/21], 0x50) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x114, 0x0, r8, 0xfffffffb, '\x00', 0x0, r9, 0x4}, 0x50) 691.360932ms ago: executing program 7 (id=3584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x5, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}]}}]}]}]}}]}, 0x74}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f00000000c0)=""/243, 0xf3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/88, 0x58}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000000a40)=""/59, 0x3b}], 0x6, &(0x7f0000000380)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000480), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000580)=""/69, 0x45}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000000700)=""/26, 0x1a}], 0x4, &(0x7f00000007c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x3, 0x40000001, &(0x7f0000000a00)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mknodat$loop(0xffffffffffffffff, &(0x7f0000002b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x1, 0x1) 626.684758ms ago: executing program 7 (id=3585): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_open(&(0x7f0000000240)='GPL\x00', 0x40, 0x80, &(0x7f0000000280)={0x7, 0x2, 0xffffffff, 0x8}) 621.914319ms ago: executing program 7 (id=3586): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 601.109881ms ago: executing program 7 (id=3587): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 582.496913ms ago: executing program 7 (id=3588): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 561.165405ms ago: executing program 7 (id=3589): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kmem_cache_free\x00', r5}, 0x18) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv6_deladdr={0x5c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_CACHEINFO={0x14}, @IFA_RT_PRIORITY={0x8}]}, 0x5c}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x80000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfd', @ANYBLOB, @ANYRESHEX=0xee01, @ANYBLOB=',noextend,dfltuid', @ANYRESHEX=0xee00, @ANYBLOB=',aname=\x00,measure,dont_hash,fsmagic=0x0000000000000003,\x00']) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, 0x0, 0x0) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 509.892039ms ago: executing program 1 (id=3593): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 459.468425ms ago: executing program 1 (id=3595): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "000000000200", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e0003f100000100"}, 0x28) write$binfmt_script(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) 458.331105ms ago: executing program 1 (id=3596): r0 = socket$inet(0x2, 0x317df02157bb48a4, 0x7) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_pidfd_open(r1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000040)=@filename='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@fwd={0x4}, @struct={0x8, 0x3, 0x0, 0x4, 0x1, 0x71, [{0x6, 0x2, 0x6}, {0x7, 0x0, 0x9}, {0x1, 0x5, 0x9}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x8}, @restrict={0x9}, @var={0xb, 0x0, 0x0, 0xe, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x8}}]}, {0x0, [0x0]}}, &(0x7f0000000180)=""/170, 0x9b, 0xaa, 0x0, 0x9, 0x10000, @value=r2}, 0x28) getpid() r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="2af1e2252d593038bc5089be1a582a14076f05f08a7bbbbda12ca88ace421603d9832e2e54ec216431f5092d8c5ca4426ac2cde6534027d45bda48d3869209059fcefe7f11d1ba048180708d08ecac2d44ea0430840abb8ce36fdfabd7c93ade341378efa468b8a04b6237fca99b62f2485737814faf934f2db207041dfb57b92af401b2edea7507c09c3247709d01f2deaad9bff00f744a2eff03e6c3e4463229e3c883d6afd9d5be8ccca5c3d72f306dae179c83d40cba2fa9c56941d6a1997484a379a9c8616739a48999ab7f408593efba3d4e2df323c5a664c72c280b", 0xdf, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r4, 0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, r6, &(0x7f00000005c0)={0x6, 0x3, 0xffff, 0x9, 0x5, 0x2, 0x4, 0x9, 0x5}) r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$setsig(r7, 0xa, 0x27) syz_open_procfs$pagemap(r1, &(0x7f0000000640)) r8 = socket$xdp(0x2c, 0x3, 0x0) bind(r0, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @multicast1}, 0x3, 0x2, 0x2, 0x1}}, 0x80) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0xd08, 0xb40, 0x8c0, 0x0, 0x9a8, 0xb40, 0xc70, 0xc70, 0xc70, 0xc70, 0xc70, 0x6, &(0x7f0000000700), {[{{@uncond, 0x0, 0x880, 0x8c0, 0x0, {}, [@common=@addrtype={{0x30}, {0x84, 0x514, 0x1, 0x1}}, @common=@unspec=@u32={{0x7e0}, {[{[{0xffff}, {0x7ff, 0x3}, {0x10000, 0x2}, {0x7}, {0xaa82}, {0x136, 0x1}, {0xdde4}, {0x8, 0x1}, {0xad37, 0x2}, {0x200, 0x2}, {0x6, 0x3}], [{0x8, 0x2b797fa9}, {0xc, 0x2}, {0x7, 0x2}, {0x8000, 0x6}, {0x200, 0x3}, {0x8c, 0xfff}, {0x10001, 0x48}, {0x9, 0x5}, {0x3, 0x921}, {0xfffff61b, 0x80000001}, {0xfffffffe, 0x127}], 0xa, 0x8}, {[{0x1}, {0xf9f}, {0x1}, {0x9, 0x3}, {0x6}, {0xb08c, 0x3}, {0x2, 0x3}, {0xff1e}, {0x0, 0x2}, {0x1, 0x1}, {0x200}], [{0x2}, {0x8, 0x7}, {0x81, 0x3}, {0x7, 0x6}, {0xd, 0x3}, {0x7, 0x7}, {0xe21, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x2, 0x1}, {0xf, 0xfffffff5}], 0x8, 0xa}, {[{0x8001}, {0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x9, 0x1}, {}, {0x6}, {0x40}, {0x101, 0x2}, {0x0, 0x1}], [{0x3a, 0x4}, {0xdf8, 0xc68}, {0x6, 0xc}, {0x4, 0x3da3}, {0x1, 0x4}, {0x6, 0xffff}, {0x10001, 0xfff}, {0x17, 0x64ff528e}, {0x2, 0x4}, {0x5, 0x6}, {0x10001}], 0x4, 0xa}, {[{0xa, 0x3}, {0x3, 0x2}, {0x100}, {0x1, 0x3}, {0x3, 0x3}, {0xb}, {0x3b5d, 0x80b1aab31e67c967}, {0x6ff, 0x2}, {0x80000001, 0x2}, {0x6, 0x3}, {0x80, 0x3}], [{0x8, 0x100}, {0x4, 0x4}, {0x4, 0x74}, {0x453, 0x3}, {0x4, 0x5}, {0x0, 0xd}, {0x800, 0x1}, {0x3, 0x1ff}, {0x5, 0x18}, {0x3, 0x1}, {0x3, 0x100}], 0x1, 0x7}, {[{0x1ff, 0x1}, {0xb, 0x2}, {0x5, 0x1}, {0xc06, 0x2}, {0x19de, 0x3}, {0x36a, 0x2}, {0xa9, 0x3}, {0x3}, {0x7, 0x1}, {0x4, 0x3}, {0x2}], [{0x100, 0x6}, {0xfffff001}, {0xc00, 0x400}, {0xc7f, 0x7}, {0x8, 0x350}, {0x5, 0xff}, {0x80000000}, {0x1ff, 0xfffffffe}, {0x0, 0xfffffff8}, {0x3, 0x9}, {0x7fff, 0xb6c9}], 0x6, 0x1}, {[{0x1, 0x1}, {0x8, 0x4}, {0x3, 0x2}, {0x7, 0x2}, {0x5}, {0xb2e6, 0x3}, {0x400, 0x3}, {0x8, 0x1}, {0x7, 0x3}, {0x6}, {0x5}], [{0x12, 0x35}, {0x10001, 0xb4}, {0xd, 0x2}, {0x6, 0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x0, 0xd}, {0x94de, 0x1}, {0x80000001, 0x2}, {0x95, 0x2}], 0x6}, {[{0x0, 0x2}, {0x0, 0x1}, {0x400, 0x2}, {0x8}, {0x80000001, 0x1}, {0x7, 0x2}, {0x7}, {0x6}, {0xfffffffe, 0x2}, {0xffff1073, 0x2}, {0xff, 0x2}], [{0xfffffff8, 0x3ff}, {0x4d27, 0x1}, {0x3, 0x4}, {0x3, 0xf}, {0x6, 0x1}, {0x9}, {0x9, 0x7}, {0x4, 0xffffffff}, {0x2, 0x7}, {0x5, 0x8}, {0x80000001}], 0x8, 0x9}, {[{0x4, 0x1}, {0x0, 0x1}, {0x400, 0x2}, {0x7, 0x3}, {0x76200}, {0x10, 0x3}, {0x80000001, 0x1}, {0x9, 0x1}, {0x9}, {0x3, 0x3}, {0x0, 0x3}], [{0x4, 0xd}, {0x0, 0x4}, {0x2, 0x6}, {0xe, 0x8}, {0x7, 0xd}, {0x6, 0x200}, {0x7, 0x1}, {0x7f, 0x2}, {0x7f, 0x1}, {0x9}, {0x1, 0xe}], 0x4, 0x6}, {[{0x2a5, 0x1}, {0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x5}, {0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x8}], [{0x9, 0xffff}, {0x0, 0x1}, {0x2, 0x7f6}, {0x7, 0x1}, {0x400, 0x9}, {0x9, 0x8}, {0x7, 0x80000000}, {0x6, 0x10001}, {0xffffffff}, {0x5, 0x6}, {0x8, 0x3}], 0x2}, {[{0x1000}, {0x6, 0x2}, {0x3ff, 0x3}, {0x12}, {0x80000001}, {0xd, 0x2}, {0x7, 0x3}, {0x3ff, 0x2}, {0x2, 0x1}, {0xfffffffe}, {0x5, 0x1}], [{0x9, 0xfe0}, {0x80000001, 0x1}, {0x4, 0x142b}, {0x1, 0x6}, {0x9}, {0x8, 0x202}, {0x9, 0x87}, {0x1, 0x9}, {0x3, 0x5}, {0xfffffff5, 0x40}, {0xfffff7f4, 0x7ff}], 0x9, 0x1}, {[{0x81, 0xc6d16da4c3fd27fa}, {0x2}, {0x8, 0x1}, {0xdd8d, 0x2}, {0x7fffffff, 0x1}, {0x85}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x3}], [{0x1, 0xa6}, {0x100, 0x5}, {0x8, 0x1ff}, {0x5902, 0x9}, {0x10001, 0x6c000000}, {0x5a4, 0x1}, {0xc19, 0x6}, {0x2, 0x100}, {0x843, 0x80000001}, {0xb, 0xa}, {0x4, 0x1}], 0x8, 0x3}], 0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffffd, 0x80000001, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, 0x4e22}}}, {{@ip={@local, @multicast2, 0xff000000, 0xffffff00, 'pim6reg1\x00', 'macsec0\x00', {0x231d98b1a46709d8}, {0xff}, 0xc, 0x2, 0x48}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@ip={@broadcast, @remote, 0x1fe000000, 0x0, 'pimreg\x00', 'veth1\x00', {}, {0xff}, 0x89, 0x2, 0x8}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x0, 0x1, 0x1}}, @common=@ah={{0x30}, {[0x7, 0x7]}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x40}}}, {{@ip={@remote, @empty, 0x0, 0xff000000, 'veth1_to_batadv\x00', 'veth1_to_team\x00', {}, {0xff}, 0x16, 0x2, 0x50}, 0x0, 0xc0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x0, 0x74, 0x1, 0x0, "fbaaef3753d044900f43ac26f5581daedf2c4d0a39609b939c14260a6c57e4eba4592882d96eac83eb857d79c3457d5d0af9d7352c93340430db65e5e3ad4388"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xd68) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001500)={'veth1_to_bond\x00', {0x2, 0x4e24, @broadcast}}) r9 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000001540)={0x28, 0x0, 0x2710, @hyper}, 0x10, 0x0) connect$vsock_stream(r9, &(0x7f0000001580)={0x28, 0x0, 0xffffffff, @local}, 0x10) quotactl_fd$Q_SYNC(r9, 0xffffffff80000100, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000015c0)={{0x1, 0x1, 0x18, r3, {0x9933}}, './file0\x00'}) ioctl$EVIOCGSW(r10, 0x8040451b, &(0x7f0000001600)=""/122) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000001680)={0x6, 'xfrm0\x00', {0x6}, 0x2}) r11 = socket$tipc(0x1e, 0x2, 0x0) dup2(r3, r11) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000016c0), 0xffffffffffffffff) 405.15198ms ago: executing program 5 (id=3597): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 404.67728ms ago: executing program 1 (id=3598): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 394.982761ms ago: executing program 5 (id=3600): socket$kcm(0x29, 0x7, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) modify_ldt$read(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) memfd_create(&(0x7f0000000140)='/\x8a%\x80\xf3\xae\xba\x04\xd7\xc3\xcd]vS\xb1l{J\xb0<\x01\xa9h\xa7\x15\x87\xdb*i+G\x8bxQ \xa0y\xd5\xec\xd9e\rQ\x11\xfd\xc8\xac\x93\'u\xfe\x04H\xa4gC\\8\xc2\x82\xbaL\x86{\xf7E\xc6\xa0k\xe9\xd4\xa3F\xb2Dg\x16\xcb\xdfl\xf7\xea\x83\xa5\x1fkik\xd8\xcc\xb6\xda{I\x9f8\xa1\xbe0\xee\xaf\x9b\xbc]\x17\x94\xca6\xeb\x88\a\xf6}\xe1\x92\xbc\xd9r\xd4A\x1e,\'5[6b6\x84XLX\x93\xae}\xa6\xc0\xa5\xbb\x97A\xb7\t\x90\xef5\x87\x1e\xfcHu7\x13<\v\x12\x92\xbb\x1f\x19\xba\x84\xdeY~\r#\'vs2\xe6\x1dJ\xd7\b\xfd\xad91\xe2\f\x91\x94M\t(\x1dP+\xba\xf8\x9b\xa2\xcc\x126\xb4\xa4Y\x8ajg\x9c\\\x94pN\x9e\xed{\x05I\xc8\x80\xf3\xec\xc85k\xa2\xd67z\x80:\xcc\x025}\x82\xbaP\xa3&\x1b\xd1F\x85\xa3\xa0\xd2\xc7m\x88\xad\x98\'\xd7\xe7\xbf\x15\x02\x00\x00\x00\x00\x00\x00l\x12\xa8\xee\xea\xea\xb0$\xad\xc5\xa3\xc99\x95\x04\xbe\xa4\x15`U&\xa5?\x02\xbaeD\xebAVg\xc66\x832R', 0x6) 377.096303ms ago: executing program 1 (id=3601): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0xbdd188018d36fd55) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x6701, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x20000400) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r3, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = accept$unix(r4, &(0x7f0000000180)=@abs, 0x0) fdatasync(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x8000}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000380)={'vlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}) 371.755194ms ago: executing program 5 (id=3602): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea95ec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf81700cd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be3827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f969369de47422604e2fc5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293b6c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b612272d40f522d8c98c879aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbe71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd46dbd61627a2e0a74b5e6aefb7eee403502734137ff47a57f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a125e3af1130d66a7b66837ae7e7123dde7404a067ad0a6a2d6bec9411b61cad4121be3c72ff3a04713042253d438e7becf8120de3895b8ce974958bde39cb8da3427a2e9e2de936431e67fed5ab5684db07de39083d8948cc4c8a2608100000000000000000000aecb8b0b7941088f971ce17427eec32a012295cc0cdd32955176b6ad5a4bb953e58ccfa9428f452cfb5a48a9fda26db3985c8be3c2f99827da074825b01c4a3a71fb59d5798100000000000000c76b05a45d2dd8c20d971e2f3e4369168f5cb83d6ff3a18733fec726034fbfa95624135bee374414b2c8c61f52357a520efd6a10aff244bc8a62ed367981fb4d5d77f7bc093958ff46527499957da4934cd4b370cf76f72dd05fa80cdfb68c836fd81be7a58532e041a87f9222f157610a4bcdc05b2a55308c8e7568b90f7a338557e816a16972aea79dff5becefa6f9c5ce6c58fb38da9e7532dc53cfdc2e789b76f7d32aca1bfea2aa62621b78dded30fc07171866bf3d552900000000a32dda61eeda1750e157c2d569b9d08f583c0ee28daec2e8bb85f3c8e91c4448096ee953def18dc73e55cb30f9cd069d8780b00eaba382f0c3ae391c30a5f1b0f36dd0c2193b791995d2890327a10d7abac76d1202f72e97f0105184d7aaaab8d3e29c9a8d263f076b55cf53c5bb9c0662a3d19a6722d7f83ae4331d3256f90af0857788b380ccc3b266c418e66d1d756d5df6423dd0cea67bc235d3776d22270fc19301ead09f156893"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 371.420533ms ago: executing program 0 (id=3603): r0 = open$dir(&(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, 0x4) openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x404800, 0x22) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)="e02a4f15c3b2d082abed0faa530e56960abb7d70f206200e6fb79d36d5e897995e31249bf1a1875de7b0f32bf45514e4f466", 0x32, 0x2) 335.211527ms ago: executing program 0 (id=3604): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e6, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 334.881397ms ago: executing program 0 (id=3605): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac8180"], 0xfe33) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 266.564784ms ago: executing program 0 (id=3606): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r1}, 0x10) getgid() 266.083154ms ago: executing program 0 (id=3607): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c010000170a010200000000000000000200000514000380080002400000000708000240000000400900020073797a32000000000c0005400000000000000004ec0003800800014000000000080002400000000668000380140001006772653000000000000000000000000014000100776730000000000000000000000000001400010073797a5f74756e0000000000000000001400010070696d726567000000000000000000001400010076657468305f746f5f687372000000000800014000000000540003801400010076657468315f766c616e0000000000001400010070696d7265673000000000000000000014000100626174616476300000000000000000001400010070696d726567300000000000000000000800024000000e220400039610ceeb400000000a090001"], 0x15c}, 0x1, 0x0, 0x0, 0x44080}, 0x4809c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 255.315425ms ago: executing program 0 (id=3608): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "000000000200", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e0003f100000100"}, 0x28) write$binfmt_script(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x40) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r0, r1, 0x0) 206.533199ms ago: executing program 5 (id=3609): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1000404, &(0x7f0000000180)={[{@nobh}, {@auto_da_alloc}, {@dioread_lock}, {@debug}], [{@obj_role={'obj_role', 0x3d, ':(-@'}}, {@pcr={'pcr', 0x3d, 0x1a}}]}, 0x2, 0x42f, &(0x7f0000000940)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x50000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@newtclass={0x78, 0x28, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xffe0}, {0xffe0, 0xe}, {0x5, 0x8}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x2, 0x29d, 0x9, 0x2, 0x1}, {0x9, 0x0, 0x8, 0x30d, 0x9076, 0x5}, 0x93, 0x7, 0x3, 0x3, 0x9}}]}}, @TCA_RATE={0x6, 0x5, {0xf4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x2f, 0x9}}, @TCA_RATE={0x6, 0x5, {0x30, 0x3}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)) syz_emit_ethernet(0x46, 0x0, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (fail_nth: 18) 158.283084ms ago: executing program 6 (id=3610): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 157.620084ms ago: executing program 6 (id=3611): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) 135.981306ms ago: executing program 6 (id=3612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x200000000}, 0x18) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac1414aa0011000000000000000000000001"], 0x30}, 0x4040810) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) 56.567484ms ago: executing program 1 (id=3613): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x2ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) socket(0x40000000015, 0x5, 0x0) (async) socket(0x40000000015, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0xffffffff}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)=@bridge_getvlan={0x20, 0x72, 0x301, 0x4000001, 0x4, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x12}]}, 0x20}, 0x1, 0xf00, 0x0, 0x80}, 0x4000810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_BOTH(r5, 0x82307201, &(0x7f0000001480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r5}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfe3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newtaction={0x52c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x518, 0x1, [@m_police={0x4a0, 0x1, 0x0, 0x0, {{0xb}, {0x474, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3f5d}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x44}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd11}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x7, 0xc, 0xfffffffd, 0xfffffff7, 0xf, 0x9, 0x1, 0x0, 0x2, 0x6da, 0x8, 0xe9ff, 0x11e, 0x7, 0x3c, 0x7, 0x2e, 0xfff, 0x3ff, 0x2, 0x6, 0x4, 0x0, 0xffc, 0x3, 0x5, 0xb, 0x7, 0x0, 0xc, 0x9, 0x0, 0xfffffe00, 0x4fad, 0x8000, 0x3ff, 0x9, 0x8, 0x1, 0x4, 0x2, 0x0, 0x6, 0xb4c5, 0x53, 0x9, 0x2, 0x5, 0x6, 0x0, 0x6, 0x3, 0x3, 0x5, 0x6, 0x2, 0xffffff81, 0x8, 0x4, 0x10001, 0x2, 0x5, 0x81, 0x3ff, 0x8, 0x1, 0x5, 0x1, 0x7, 0x1, 0x3, 0x6, 0x9, 0x2, 0x7fff, 0x3, 0x100, 0x9, 0x42bf45cc, 0x7, 0x10000, 0x4, 0x7, 0x5cdc2843, 0x9, 0x5985, 0x0, 0xd19c, 0x9, 0x0, 0x200, 0x10001, 0x101, 0x2, 0xc3b, 0xbe0, 0x4, 0xaa1, 0x8, 0x2, 0xb, 0x1, 0x9, 0x5, 0x4, 0x64, 0x6, 0x40, 0x0, 0x7fffffff, 0x0, 0x5, 0x0, 0x2, 0x4e, 0x2, 0x200, 0x5, 0xb, 0x8, 0x8000, 0x7e, 0x8, 0x6f, 0x5, 0x1, 0x68cb, 0x7, 0x1c, 0x10001, 0x36780000, 0xff, 0xfffffff9, 0x5, 0xfffffffb, 0x4, 0x0, 0x4, 0x2, 0x8, 0x1, 0x9, 0xc2, 0x7, 0x81, 0xcb7, 0x800, 0x0, 0x55a, 0x6, 0x7, 0x8, 0x2, 0x7, 0x8, 0x1, 0x7, 0x8, 0x6, 0xfffffffe, 0x2, 0xfff, 0x9, 0x1, 0x2, 0x7, 0x8, 0x4, 0x10001, 0x2, 0xe, 0x9f, 0x507d, 0x52af, 0xfffffffb, 0xffff8001, 0x9, 0x80000000, 0x7, 0xec36, 0x4, 0x5, 0x7fffffff, 0x2d6c, 0x6, 0x172, 0x0, 0x4, 0x3b, 0x3, 0x9, 0x6, 0x800, 0x2, 0x40, 0x9, 0x7f, 0x0, 0x7, 0x7fff, 0x5, 0x9, 0x0, 0x9ce8, 0x100, 0xe, 0x6, 0x7f2, 0x3ff, 0x16, 0x2, 0xfffffffa, 0x7ff, 0x1, 0x4fc, 0x17c4, 0x748, 0x7, 0x7a, 0x8, 0x3, 0x7, 0x3, 0xebe1, 0x3, 0x8, 0x7, 0x8e, 0x3, 0x8, 0x0, 0xfffff618, 0x56, 0x0, 0x1, 0x4, 0x7, 0x8, 0x8b, 0xffffff20, 0xfffffc00, 0x2, 0xfffffff8, 0x10, 0x0, 0x80000001, 0x8, 0x1, 0x0, 0x40, 0x7, 0x2, 0x9, 0x6630]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffefffffff, 0x7, 0x3, 0x1, {0xc0, 0x1, 0xfff2, 0x1, 0x8000, 0x5}, {0x4, 0x1, 0x9, 0x0, 0x97, 0xe}, 0x7, 0x6e, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x52c}}, 0x0) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 56.292114ms ago: executing program 6 (id=3614): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x4525, 0x1000, 0x1, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 56.106694ms ago: executing program 6 (id=3615): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x693e, 0x0, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0xddc, 0x4c3, 0x43, 0x0, 0x0) 0s ago: executing program 6 (id=3616): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f", 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xc8}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x81010000000000, 0x2) kernel console output (not intermixed with test programs): : Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.460493][T10850] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 176.466919][T10850] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 f2 01 bb ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 176.486783][T10850] RSP: 0018:ffffc9000fc03408 EFLAGS: 00010282 [ 176.492920][T10850] RAX: 6879128be2eaf100 RBX: ffff888119f51040 RCX: ffff88811dbee300 [ 176.499466][T10726] veth1_macvtap: entered promiscuous mode [ 176.500963][T10850] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 176.514656][T10850] RBP: 0000000000000000 R08: 0001c9000fc03257 R09: 0000000000000000 [ 176.522699][T10850] R10: 00000000ffffffff R11: 0000000000000000 R12: ffff888119f51000 [ 176.527445][T10726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.530823][T10850] R13: ffff888119a08000 R14: ffff888119a08000 R15: ffff888119f51038 [ 176.546133][T10850] FS: 00007f950d3076c0(0000) GS:ffff8882aef3a000(0000) knlGS:0000000000000000 [ 176.550966][T10857] loop6: detected capacity change from 0 to 512 [ 176.555282][T10850] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.568023][T10850] CR2: 00007f2e17f4fd54 CR3: 00000001300a2000 CR4: 00000000003506f0 [ 176.576056][T10850] Call Trace: [ 176.579385][T10850] [ 176.582338][T10850] reg_set_min_max+0x1eb/0x260 [ 176.583514][T10726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.587127][T10850] check_cond_jmp_op+0x1370/0x19e0 [ 176.599507][T10850] do_check+0x3363/0x8460 [ 176.603960][T10850] do_check_common+0xc5e/0x12b0 [ 176.605050][T10857] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 176.608898][T10850] bpf_check+0xaaae/0xd9d0 [ 176.608940][T10850] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 176.629508][T10850] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 176.633019][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.635453][T10850] ? pcpu_block_update+0x24e/0x3b0 [ 176.647390][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.649593][T10850] ? css_rstat_updated+0xb7/0x240 [ 176.660098][T10857] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 176.663403][T10850] ? try_charge_memcg+0x200/0x9e0 [ 176.663430][T10850] ? _find_next_zero_bit+0x64/0xa0 [ 176.682867][T10850] ? pcpu_block_update+0x232/0x3b0 [ 176.688006][T10850] ? pcpu_block_refresh_hint+0x157/0x170 [ 176.693679][T10850] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 176.699806][T10850] ? css_rstat_updated+0xb7/0x240 [ 176.704902][T10850] ? __rcu_read_unlock+0x4f/0x70 [ 176.709969][T10850] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 176.715848][T10850] ? bpf_prog_alloc+0x5b/0x150 [ 176.720676][T10850] ? pcpu_alloc_noprof+0xd29/0x1250 [ 176.726027][T10850] ? should_fail_ex+0x30/0x280 [ 176.730967][T10850] ? should_failslab+0x8c/0xb0 [ 176.735767][T10850] ? __kmalloc_noprof+0x2a2/0x570 [ 176.740907][T10850] ? security_bpf_prog_load+0x60/0x140 [ 176.746529][T10850] ? selinux_bpf_prog_load+0xad/0xd0 [ 176.751939][T10850] ? security_bpf_prog_load+0x9e/0x140 [ 176.757500][T10850] bpf_prog_load+0xf6e/0x1100 [ 176.762300][T10850] ? security_bpf+0x2b/0x90 [ 176.766836][T10850] __sys_bpf+0x469/0x7c0 [ 176.771169][T10850] __x64_sys_bpf+0x41/0x50 [ 176.775619][T10850] x64_sys_call+0x2aee/0x3000 [ 176.780411][T10850] do_syscall_64+0xd2/0x200 [ 176.784942][T10850] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 176.791228][T10850] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 176.796972][T10850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.802957][T10850] RIP: 0033:0x7f950e89eec9 [ 176.807404][T10850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.827060][T10850] RSP: 002b:00007f950d307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.835518][T10850] RAX: ffffffffffffffda RBX: 00007f950eaf5fa0 RCX: 00007f950e89eec9 [ 176.843596][T10850] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 176.851609][T10850] RBP: 00007f950e921f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.859629][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.867618][T10850] R13: 00007f950eaf6038 R14: 00007f950eaf5fa0 R15: 00007fff922c7f38 [ 176.875708][T10850] [ 176.878831][T10850] ---[ end trace 0000000000000000 ]--- [ 176.887002][ T3347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.915373][ T3347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.953594][T10864] loop7: detected capacity change from 0 to 512 [ 176.962404][T10857] loop6: detected capacity change from 0 to 4096 [ 176.984347][T10857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.000895][T10864] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.014950][T10864] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.026891][T10857] validate_nla: 2 callbacks suppressed [ 177.026909][T10857] netlink: 'syz.6.2601': attribute type 1 has an invalid length. [ 177.052328][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.082074][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.150979][T10883] hub 9-0:1.0: USB hub found [ 177.155825][T10883] hub 9-0:1.0: 8 ports detected [ 177.183372][T10879] loop6: detected capacity change from 0 to 512 [ 177.198828][T10879] ext4: Unknown parameter 'func' [ 177.260475][T10893] netlink: 'syz.6.2614': attribute type 10 has an invalid length. [ 177.282245][T10895] loop7: detected capacity change from 0 to 512 [ 177.290721][T10895] EXT4-fs: Ignoring removed nobh option [ 177.300566][T10895] EXT4-fs (loop7): failed to initialize system zone (-117) [ 177.310185][T10895] EXT4-fs (loop7): mount failed [ 177.443484][T10909] hub 9-0:1.0: USB hub found [ 177.448551][T10909] hub 9-0:1.0: 8 ports detected [ 177.553624][T10923] loop7: detected capacity change from 0 to 512 [ 177.565527][T10923] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 177.575933][T10923] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 177.589691][T10927] loop6: detected capacity change from 0 to 512 [ 177.629433][T10927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.652600][T10927] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.658556][T10923] loop7: detected capacity change from 0 to 4096 [ 177.689702][T10923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.730018][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.756356][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.831403][T10937] hub 9-0:1.0: USB hub found [ 177.836273][T10937] hub 9-0:1.0: 8 ports detected [ 178.016048][T10959] loop6: detected capacity change from 0 to 512 [ 178.042754][T10959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.051593][T10959] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 178.061494][T10959] EXT4-fs (loop6): invalid inodes per group: 196640 [ 178.061494][T10959] [ 178.083055][ T3347] Bluetooth: hci0: Frame reassembly failed (-84) [ 178.212533][T10971] netlink: 'syz.1.2648': attribute type 10 has an invalid length. [ 178.251255][T10973] netlink: 'syz.6.2650': attribute type 2 has an invalid length. [ 178.259200][T10973] netlink: 'syz.6.2650': attribute type 2 has an invalid length. [ 178.266997][T10973] netlink: 'syz.6.2650': attribute type 1 has an invalid length. [ 178.274784][T10973] __nla_validate_parse: 24 callbacks suppressed [ 178.274799][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2650'. [ 178.296683][T10973] hub 9-0:1.0: USB hub found [ 178.299514][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 178.301709][T10973] hub 9-0:1.0: 8 ports detected [ 178.353912][T10978] loop6: detected capacity change from 0 to 512 [ 178.361677][T10979] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2652'. [ 178.372376][T10978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.379058][T10979] netlink: 'syz.1.2652': attribute type 10 has an invalid length. [ 178.384983][T10978] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.434243][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 178.434258][ T29] audit: type=1326 audit(1760222565.939:15765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 178.477133][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.491905][ T29] audit: type=1326 audit(1760222565.979:15766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 178.515534][ T29] audit: type=1326 audit(1760222565.979:15767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 178.539265][ T29] audit: type=1326 audit(1760222565.979:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f012b60d710 code=0x7ffc0000 [ 178.562880][ T29] audit: type=1326 audit(1760222565.979:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f012b6106f7 code=0x7ffc0000 [ 178.586578][ T29] audit: type=1326 audit(1760222565.979:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 178.610099][ T29] audit: type=1326 audit(1760222565.979:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f012b6106f7 code=0x7ffc0000 [ 178.633833][ T29] audit: type=1326 audit(1760222565.979:15772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f012b60db2a code=0x7ffc0000 [ 178.657380][ T29] audit: type=1326 audit(1760222565.979:15773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 178.681002][ T29] audit: type=1326 audit(1760222565.979:15774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10982 comm="syz.1.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 178.705179][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.993203][T10999] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2660'. [ 179.019212][T11001] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2661'. [ 179.028654][T11001] netlink: 'syz.5.2661': attribute type 10 has an invalid length. [ 179.051454][T10999] loop6: detected capacity change from 0 to 512 [ 179.058191][T10999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.073672][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2663'. [ 179.083171][T10999] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 179.093102][T10999] EXT4-fs (loop6): invalid inodes per group: 196640 [ 179.093102][T10999] [ 179.135419][T11009] loop5: detected capacity change from 0 to 512 [ 179.156531][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2664'. [ 179.165560][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2664'. [ 179.183415][T11009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.199103][T11009] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.248724][T11015] loop6: detected capacity change from 0 to 512 [ 179.256783][T11015] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 179.270167][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.272127][T11015] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 179.314483][T11017] loop7: detected capacity change from 0 to 512 [ 179.337588][T11015] loop6: detected capacity change from 0 to 4096 [ 179.345060][T11017] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 179.355021][T11019] netlink: 'syz.5.2668': attribute type 2 has an invalid length. [ 179.362820][T11019] netlink: 'syz.5.2668': attribute type 2 has an invalid length. [ 179.370565][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2668'. [ 179.382064][T11015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.402969][T11017] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 179.421860][T11019] hub 9-0:1.0: USB hub found [ 179.428672][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.458651][T11019] hub 9-0:1.0: 8 ports detected [ 179.476907][T11023] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 179.479541][T11017] loop7: detected capacity change from 0 to 4096 [ 179.505051][T11017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.532755][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.587141][T11032] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2674'. [ 179.684819][T11040] loop5: detected capacity change from 0 to 512 [ 179.720253][T11044] loop6: detected capacity change from 0 to 512 [ 179.728113][T11040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.737071][T11044] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.748783][T11040] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.760123][T11044] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 179.770093][T11044] EXT4-fs (loop6): invalid inodes per group: 196640 [ 179.770093][T11044] [ 179.793494][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.954048][T11058] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 179.970651][T11055] loop7: detected capacity change from 0 to 1024 [ 179.977464][T11055] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 180.070253][T11067] loop6: detected capacity change from 0 to 512 [ 180.088490][T11067] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.122959][T11075] loop7: detected capacity change from 0 to 512 [ 180.131588][T11067] EXT4-fs (loop6): 1 truncate cleaned up [ 180.137818][T11067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.150040][ T3619] Bluetooth: hci0: command 0x1003 tx timeout [ 180.150075][ T5607] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 180.197893][T11075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.220377][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.229532][T11075] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.254624][T11080] loop6: detected capacity change from 0 to 512 [ 180.261701][T11080] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.271916][T11080] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 180.327961][T11080] loop6: detected capacity change from 0 to 4096 [ 180.328177][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.379821][T11080] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.434331][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.503380][T11092] loop6: detected capacity change from 0 to 512 [ 180.516090][T11092] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.523504][T11092] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.533451][T11092] EXT4-fs (loop6): invalid inodes per group: 196640 [ 180.533451][T11092] [ 180.854126][T11120] loop6: detected capacity change from 0 to 512 [ 180.868170][T11120] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.894442][T11120] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 180.904356][T11120] EXT4-fs (loop6): invalid inodes per group: 196640 [ 180.904356][T11120] [ 180.905419][T11118] loop7: detected capacity change from 0 to 512 [ 180.960905][T11118] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 180.978547][T11118] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 181.125128][T11137] hub 9-0:1.0: USB hub found [ 181.129915][T11137] hub 9-0:1.0: 8 ports detected [ 181.189594][T11144] loop7: detected capacity change from 0 to 512 [ 181.223170][T11148] loop5: detected capacity change from 0 to 1024 [ 181.246894][T11148] EXT4-fs: Ignoring removed orlov option [ 181.271569][T11144] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.292146][T11157] loop6: detected capacity change from 0 to 512 [ 181.306392][T11144] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.306794][T11148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.317550][T11157] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 181.339184][T11157] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 181.378756][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.388920][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.434456][T11168] hub 9-0:1.0: USB hub found [ 181.439210][T11168] hub 9-0:1.0: 8 ports detected [ 181.661274][T11196] loop7: detected capacity change from 0 to 1024 [ 181.690292][T11196] EXT4-fs: Ignoring removed orlov option [ 181.702803][T11201] loop5: detected capacity change from 0 to 1024 [ 181.717363][T11201] EXT4-fs: Ignoring removed orlov option [ 181.737289][T11196] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 181.817441][T11196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.832905][T11201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.875458][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.005153][T11229] loop5: detected capacity change from 0 to 1024 [ 182.013036][T11229] EXT4-fs: Ignoring removed orlov option [ 182.023676][T11230] pimreg: entered allmulticast mode [ 182.050379][T11229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.227909][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.266062][T11240] random: crng reseeded on system resumption [ 182.296794][T11248] validate_nla: 4 callbacks suppressed [ 182.296809][T11248] netlink: 'syz.6.2762': attribute type 10 has an invalid length. [ 182.300812][T11240] Restarting kernel threads ... [ 182.344337][T11240] Done restarting kernel threads. [ 182.379393][T11254] FAULT_INJECTION: forcing a failure. [ 182.379393][T11254] name failslab, interval 1, probability 0, space 0, times 0 [ 182.392228][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.5.2766 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.392271][T11254] Tainted: [W]=WARN [ 182.392280][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.392299][T11254] Call Trace: [ 182.392306][T11254] [ 182.392342][T11254] __dump_stack+0x1d/0x30 [ 182.392368][T11254] dump_stack_lvl+0xe8/0x140 [ 182.392394][T11254] dump_stack+0x15/0x1b [ 182.392484][T11254] should_fail_ex+0x265/0x280 [ 182.392596][T11254] should_failslab+0x8c/0xb0 [ 182.392633][T11254] kmem_cache_alloc_noprof+0x50/0x480 [ 182.392666][T11254] ? getname_flags+0x80/0x3b0 [ 182.392774][T11254] getname_flags+0x80/0x3b0 [ 182.392847][T11254] user_path_at+0x28/0x130 [ 182.392890][T11254] __x64_sys_umount+0x85/0xe0 [ 182.392982][T11254] x64_sys_call+0xdd2/0x3000 [ 182.393009][T11254] do_syscall_64+0xd2/0x200 [ 182.393039][T11254] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.393120][T11254] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 182.393224][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.393253][T11254] RIP: 0033:0x7f7796e3eec9 [ 182.393272][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.393338][T11254] RSP: 002b:00007f779589f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.393363][T11254] RAX: ffffffffffffffda RBX: 00007f7797095fa0 RCX: 00007f7796e3eec9 [ 182.393380][T11254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 182.393395][T11254] RBP: 00007f779589f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.393410][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.393425][T11254] R13: 00007f7797096038 R14: 00007f7797095fa0 R15: 00007ffc7bcc4b38 [ 182.393474][T11254] [ 182.618636][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.778377][T11269] loop7: detected capacity change from 0 to 1024 [ 182.805315][T11269] EXT4-fs: Ignoring removed orlov option [ 182.893644][T11280] netlink: 'syz.6.2778': attribute type 10 has an invalid length. [ 182.955057][T11288] hub 9-0:1.0: USB hub found [ 182.968399][T11288] hub 9-0:1.0: 8 ports detected [ 183.173425][T11309] netlink: 'syz.6.2791': attribute type 10 has an invalid length. [ 183.179414][T11311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11311 comm=syz.7.2792 [ 183.220463][T11311] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.229852][T11311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11311 comm=syz.7.2792 [ 183.242485][T11311] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11311 comm=syz.7.2792 [ 183.316220][T11319] hub 9-0:1.0: USB hub found [ 183.328406][T11319] hub 9-0:1.0: 8 ports detected [ 183.335859][T11322] __nla_validate_parse: 20 callbacks suppressed [ 183.335881][T11322] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2797'. [ 183.426530][T11328] loop7: detected capacity change from 0 to 1024 [ 183.438864][T11328] EXT4-fs: Ignoring removed orlov option [ 183.462316][T11332] loop5: detected capacity change from 0 to 512 [ 183.507915][T11332] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 183.520672][T11346] hub 1-0:1.0: USB hub found [ 183.529212][T11346] hub 1-0:1.0: 8 ports detected [ 183.561036][T11348] FAULT_INJECTION: forcing a failure. [ 183.561036][T11348] name failslab, interval 1, probability 0, space 0, times 0 [ 183.573841][T11348] CPU: 0 UID: 0 PID: 11348 Comm: syz.7.2806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 183.573878][T11348] Tainted: [W]=WARN [ 183.573886][T11348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.573900][T11348] Call Trace: [ 183.573907][T11348] [ 183.573914][T11348] __dump_stack+0x1d/0x30 [ 183.573939][T11348] dump_stack_lvl+0xe8/0x140 [ 183.574030][T11348] dump_stack+0x15/0x1b [ 183.574051][T11348] should_fail_ex+0x265/0x280 [ 183.574137][T11348] ? usb_control_msg+0x58/0x250 [ 183.574200][T11348] should_failslab+0x8c/0xb0 [ 183.574237][T11348] __kmalloc_cache_noprof+0x4c/0x4a0 [ 183.574276][T11348] usb_control_msg+0x58/0x250 [ 183.574313][T11348] usb_reset_configuration+0x10e/0x640 [ 183.574347][T11348] ? ioctl_has_perm+0x257/0x2a0 [ 183.574388][T11348] proc_setconfig+0x111/0x1a0 [ 183.574423][T11348] usbdev_ioctl+0x10c1/0x1700 [ 183.574477][T11348] ? __pfx_usbdev_ioctl+0x10/0x10 [ 183.574499][T11348] __se_sys_ioctl+0xce/0x140 [ 183.574521][T11348] __x64_sys_ioctl+0x43/0x50 [ 183.574543][T11348] x64_sys_call+0x1816/0x3000 [ 183.574564][T11348] do_syscall_64+0xd2/0x200 [ 183.574666][T11348] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 183.574754][T11348] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 183.574798][T11348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.574820][T11348] RIP: 0033:0x7f950e89eec9 [ 183.574838][T11348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.574862][T11348] RSP: 002b:00007f950d307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.574887][T11348] RAX: ffffffffffffffda RBX: 00007f950eaf5fa0 RCX: 00007f950e89eec9 [ 183.574915][T11348] RDX: 0000200000000000 RSI: 0000000080045505 RDI: 0000000000000003 [ 183.574927][T11348] RBP: 00007f950d307090 R08: 0000000000000000 R09: 0000000000000000 [ 183.575004][T11348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.575015][T11348] R13: 00007f950eaf6038 R14: 00007f950eaf5fa0 R15: 00007fff922c7f38 [ 183.575034][T11348] [ 183.970013][T11375] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2819'. [ 183.974115][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2816'. [ 183.984205][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2818'. [ 184.001072][T11375] loop7: detected capacity change from 0 to 512 [ 184.007638][T11375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.027725][T11375] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 184.037718][T11375] EXT4-fs (loop7): invalid inodes per group: 196640 [ 184.037718][T11375] [ 184.165981][T11386] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2822'. [ 184.178703][T11386] loop7: detected capacity change from 0 to 512 [ 184.185256][T11386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.195289][T11386] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 184.205270][T11386] EXT4-fs (loop7): invalid inodes per group: 196640 [ 184.205270][T11386] [ 184.215080][T11384] loop6: detected capacity change from 0 to 2048 [ 184.245002][T11390] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2824'. [ 184.256342][T11390] netlink: 'syz.5.2824': attribute type 10 has an invalid length. [ 184.276689][T11384] loop6: p2 p3 p7 [ 184.325032][T11395] loop5: detected capacity change from 0 to 1024 [ 184.331998][T11395] EXT4-fs: Ignoring removed orlov option [ 184.394400][T11402] loop5: detected capacity change from 0 to 512 [ 184.425321][T11402] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.440993][T11408] loop7: detected capacity change from 0 to 16384 [ 184.475367][T11410] hub 9-0:1.0: USB hub found [ 184.483535][T11410] hub 9-0:1.0: 8 ports detected [ 184.562774][T11413] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2832'. [ 184.611533][T11413] loop6: detected capacity change from 0 to 512 [ 184.618426][T11413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.625486][T11413] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 184.635862][T11413] EXT4-fs (loop6): invalid inodes per group: 196640 [ 184.635862][T11413] [ 184.649238][T11411] loop7: detected capacity change from 16384 to 0 [ 184.839119][T11423] loop5: detected capacity change from 0 to 1024 [ 184.846573][T11427] loop6: detected capacity change from 0 to 1024 [ 184.848846][T11423] EXT4-fs: Ignoring removed orlov option [ 184.853454][T11427] EXT4-fs: Ignoring removed orlov option [ 184.859317][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2840'. [ 184.966436][T11443] loop6: detected capacity change from 0 to 1024 [ 184.973745][T11443] EXT4-fs: Ignoring removed orlov option [ 184.980197][T11443] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 185.009124][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 185.009142][ T29] audit: type=1326 audit(1760222572.519:16021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11422 comm="syz.5.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 185.039013][ T29] audit: type=1326 audit(1760222572.519:16022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11422 comm="syz.5.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 185.062603][ T29] audit: type=1326 audit(1760222572.519:16023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11422 comm="syz.5.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 185.086279][ T29] audit: type=1400 audit(1760222572.549:16024): avc: denied { read write } for pid=11444 comm="syz.7.2843" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.109921][ T29] audit: type=1400 audit(1760222572.549:16025): avc: denied { open } for pid=11444 comm="syz.7.2843" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 185.135871][ T29] audit: type=1326 audit(1760222572.639:16026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11422 comm="syz.5.2836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 185.239987][T11456] FAULT_INJECTION: forcing a failure. [ 185.239987][T11456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.253148][T11456] CPU: 0 UID: 0 PID: 11456 Comm: syz.0.2848 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 185.253188][T11456] Tainted: [W]=WARN [ 185.253245][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.253258][T11456] Call Trace: [ 185.253264][T11456] [ 185.253312][T11456] __dump_stack+0x1d/0x30 [ 185.253334][T11456] dump_stack_lvl+0xe8/0x140 [ 185.253352][T11456] dump_stack+0x15/0x1b [ 185.253370][T11456] should_fail_ex+0x265/0x280 [ 185.253417][T11456] should_fail+0xb/0x20 [ 185.253447][T11456] should_fail_usercopy+0x1a/0x20 [ 185.253473][T11456] _copy_from_user+0x1c/0xb0 [ 185.253556][T11456] ___sys_sendmsg+0xc1/0x1d0 [ 185.253611][T11456] __x64_sys_sendmsg+0xd4/0x160 [ 185.253744][T11456] x64_sys_call+0x191e/0x3000 [ 185.253772][T11456] do_syscall_64+0xd2/0x200 [ 185.253836][T11456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 185.253870][T11456] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 185.253892][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.253917][T11456] RIP: 0033:0x7f688a4feec9 [ 185.253937][T11456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.253979][T11456] RSP: 002b:00007f6888f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.253998][T11456] RAX: ffffffffffffffda RBX: 00007f688a755fa0 RCX: 00007f688a4feec9 [ 185.254010][T11456] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000006 [ 185.254022][T11456] RBP: 00007f6888f67090 R08: 0000000000000000 R09: 0000000000000000 [ 185.254036][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.254051][T11456] R13: 00007f688a756038 R14: 00007f688a755fa0 R15: 00007ffcfb26f048 [ 185.254070][T11456] [ 185.471496][T11454] loop7: detected capacity change from 0 to 512 [ 185.478360][T11454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.503770][T11454] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 185.513670][T11454] EXT4-fs (loop7): invalid inodes per group: 196640 [ 185.513670][T11454] [ 185.538369][T11464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2851'. [ 185.547839][T11464] netlink: 'syz.0.2851': attribute type 10 has an invalid length. [ 185.562734][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2852'. [ 185.705750][T11477] loop7: detected capacity change from 0 to 1024 [ 185.886061][T11477] EXT4-fs: Ignoring removed orlov option [ 186.061381][T11501] loop7: detected capacity change from 0 to 512 [ 186.119800][T11501] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.193674][T11506] netlink: 'syz.5.2868': attribute type 10 has an invalid length. [ 186.228930][T11509] loop7: detected capacity change from 0 to 512 [ 186.238784][T11509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.260987][T11509] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 186.271283][T11509] EXT4-fs (loop7): invalid inodes per group: 196640 [ 186.271283][T11509] [ 186.550092][T11517] loop7: detected capacity change from 0 to 512 [ 186.578770][T11519] netlink: 'syz.5.2881': attribute type 2 has an invalid length. [ 186.586555][T11519] netlink: 'syz.5.2881': attribute type 2 has an invalid length. [ 186.594389][T11519] netlink: 'syz.5.2881': attribute type 1 has an invalid length. [ 186.642109][T11519] hub 9-0:1.0: USB hub found [ 186.659332][T11519] hub 9-0:1.0: 8 ports detected [ 186.660520][T11517] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.871904][T11537] loop5: detected capacity change from 0 to 512 [ 186.895150][T11537] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.926060][T11541] loop7: detected capacity change from 0 to 512 [ 186.940238][T11541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.980254][T11541] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 186.990201][T11541] EXT4-fs (loop7): invalid inodes per group: 196640 [ 186.990201][T11541] [ 187.061147][ T29] audit: type=1400 audit(1760222574.569:16027): avc: denied { bind } for pid=11542 comm="syz.5.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.082912][ T29] audit: type=1400 audit(1760222574.589:16028): avc: denied { getopt } for pid=11542 comm="syz.5.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.102711][ T29] audit: type=1400 audit(1760222574.589:16029): avc: denied { connect } for pid=11542 comm="syz.5.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.140447][T11547] loop7: detected capacity change from 0 to 16384 [ 187.168617][T11552] netlink: 'syz.5.2885': attribute type 2 has an invalid length. [ 187.181023][T11552] hub 9-0:1.0: USB hub found [ 187.185708][T11552] hub 9-0:1.0: 8 ports detected [ 187.381377][T11556] loop7: detected capacity change from 16384 to 0 [ 187.388129][ C1] I/O error, dev loop7, sector 12296 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 187.450246][T11575] FAULT_INJECTION: forcing a failure. [ 187.450246][T11575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.463465][T11575] CPU: 0 UID: 0 PID: 11575 Comm: syz.0.2896 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 187.463506][T11575] Tainted: [W]=WARN [ 187.463514][T11575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.463529][T11575] Call Trace: [ 187.463539][T11575] [ 187.463548][T11575] __dump_stack+0x1d/0x30 [ 187.463605][T11575] dump_stack_lvl+0xe8/0x140 [ 187.463629][T11575] dump_stack+0x15/0x1b [ 187.463693][T11575] should_fail_ex+0x265/0x280 [ 187.463733][T11575] should_fail+0xb/0x20 [ 187.463767][T11575] should_fail_usercopy+0x1a/0x20 [ 187.463790][T11575] _copy_from_user+0x1c/0xb0 [ 187.463845][T11575] ___sys_sendmsg+0xc1/0x1d0 [ 187.463896][T11575] __x64_sys_sendmsg+0xd4/0x160 [ 187.463933][T11575] x64_sys_call+0x191e/0x3000 [ 187.463998][T11575] do_syscall_64+0xd2/0x200 [ 187.464047][T11575] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.464081][T11575] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 187.464142][T11575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.464167][T11575] RIP: 0033:0x7f688a4feec9 [ 187.464186][T11575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.464241][T11575] RSP: 002b:00007f6888f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.464263][T11575] RAX: ffffffffffffffda RBX: 00007f688a755fa0 RCX: 00007f688a4feec9 [ 187.464290][T11575] RDX: 0000000000000084 RSI: 00002000000001c0 RDI: 0000000000000004 [ 187.464311][T11575] RBP: 00007f6888f67090 R08: 0000000000000000 R09: 0000000000000000 [ 187.464324][T11575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.464353][T11575] R13: 00007f688a756038 R14: 00007f688a755fa0 R15: 00007ffcfb26f048 [ 187.464375][T11575] [ 187.757309][T11583] validate_nla: 2 callbacks suppressed [ 187.757325][T11583] netlink: 'syz.5.2899': attribute type 2 has an invalid length. [ 187.770641][T11583] netlink: 'syz.5.2899': attribute type 2 has an invalid length. [ 187.778415][T11583] netlink: 'syz.5.2899': attribute type 1 has an invalid length. [ 187.806059][T11583] hub 9-0:1.0: USB hub found [ 187.810844][T11583] hub 9-0:1.0: 8 ports detected [ 187.849124][T11587] loop7: detected capacity change from 0 to 1024 [ 187.855980][T11587] EXT4-fs: Ignoring removed orlov option [ 187.869936][T11587] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 188.160620][ T29] audit: type=1326 audit(1760222575.669:16030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11602 comm="syz.1.2905" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f012b60eec9 code=0x0 [ 188.192569][T11622] hub 2-0:1.0: USB hub found [ 188.214123][T11622] hub 2-0:1.0: 8 ports detected [ 188.224690][T11632] Bluetooth: hci0: Frame reassembly failed (-84) [ 188.225008][T11630] netlink: 'syz.5.2908': attribute type 10 has an invalid length. [ 188.635434][T11646] __nla_validate_parse: 17 callbacks suppressed [ 188.635457][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2914'. [ 188.679155][T11646] loop5: detected capacity change from 0 to 512 [ 188.698713][T11646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 188.722136][T11646] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 188.732044][T11646] EXT4-fs (loop5): invalid inodes per group: 196640 [ 188.732044][T11646] [ 189.037493][T11649] loop5: detected capacity change from 0 to 512 [ 189.069856][T11649] ext4 filesystem being mounted at /232/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.085238][T11653] loop6: detected capacity change from 0 to 1024 [ 189.095537][T11653] EXT4-fs: Ignoring removed orlov option [ 189.166352][T11663] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2920'. [ 189.186322][T11663] netlink: 'syz.6.2920': attribute type 10 has an invalid length. [ 189.239244][T11670] netlink: 'syz.5.2922': attribute type 2 has an invalid length. [ 189.247027][T11670] netlink: 'syz.5.2922': attribute type 2 has an invalid length. [ 189.254888][T11670] netlink: 'syz.5.2922': attribute type 1 has an invalid length. [ 189.262684][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2922'. [ 189.292088][T11670] hub 9-0:1.0: USB hub found [ 189.297026][T11670] hub 9-0:1.0: 8 ports detected [ 189.303685][T11676] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2925'. [ 189.318470][T11674] loop6: detected capacity change from 0 to 1024 [ 189.338750][T11674] EXT4-fs: Ignoring removed orlov option [ 189.352810][T11678] loop5: detected capacity change from 0 to 128 [ 189.359796][T11678] EXT4-fs: inline encryption not supported [ 189.365942][T11678] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 189.414299][T11683] loop6: detected capacity change from 0 to 1024 [ 189.421446][T11683] EXT4-fs: Ignoring removed orlov option [ 189.427507][T11683] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 189.493668][T11684] hub 2-0:1.0: USB hub found [ 189.503955][T11684] hub 2-0:1.0: 8 ports detected [ 190.228284][ T5607] Bluetooth: hci0: command 0x1003 tx timeout [ 190.234337][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.366331][T11692] loop5: detected capacity change from 0 to 1024 [ 190.373029][T11694] loop7: detected capacity change from 0 to 512 [ 190.379836][T11692] EXT4-fs: Ignoring removed orlov option [ 190.391551][T11694] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.407877][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 190.407905][ T29] audit: type=1326 audit(1760222577.909:16034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.5.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 190.472351][T11700] loop7: detected capacity change from 0 to 512 [ 190.479878][ T29] audit: type=1326 audit(1760222577.939:16035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.5.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 190.503616][ T29] audit: type=1326 audit(1760222577.939:16036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11691 comm="syz.5.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 190.543154][ T29] audit: type=1326 audit(1760222578.049:16037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a4feec9 code=0x7ffc0000 [ 190.566880][ T29] audit: type=1326 audit(1760222578.049:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f688a4feec9 code=0x7ffc0000 [ 190.590690][ T29] audit: type=1326 audit(1760222578.049:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11703 comm="syz.0.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a4feec9 code=0x7ffc0000 [ 190.620786][T11700] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.670962][T11714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2935'. [ 190.683756][ T29] audit: type=1326 audit(1760222578.149:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.0.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a4feec9 code=0x7ffc0000 [ 190.707610][ T29] audit: type=1326 audit(1760222578.149:16041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.0.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f688a4feec9 code=0x7ffc0000 [ 190.731492][ T29] audit: type=1326 audit(1760222578.149:16042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.0.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a4feec9 code=0x7ffc0000 [ 190.755336][ T29] audit: type=1326 audit(1760222578.149:16043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11708 comm="syz.0.2945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688a4feec9 code=0x7ffc0000 [ 190.780010][T11714] netlink: 'syz.0.2935': attribute type 10 has an invalid length. [ 190.831241][T11719] netlink: 'syz.5.2937': attribute type 2 has an invalid length. [ 190.839171][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2937'. [ 190.853717][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2938'. [ 190.866659][T11719] hub 9-0:1.0: USB hub found [ 190.871479][T11719] hub 9-0:1.0: 8 ports detected [ 190.955328][T11733] loop5: detected capacity change from 0 to 1024 [ 190.968846][T11733] EXT4-fs: Ignoring removed orlov option [ 191.129736][T11744] loop7: detected capacity change from 0 to 512 [ 191.170039][T11744] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.230508][T11753] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2954'. [ 191.299316][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2955'. [ 191.352455][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2956'. [ 191.397793][T11759] hub 9-0:1.0: USB hub found [ 191.422844][T11759] hub 9-0:1.0: 8 ports detected [ 192.499601][T11792] hub 9-0:1.0: USB hub found [ 192.510921][T11792] hub 9-0:1.0: 8 ports detected [ 192.536091][T11794] loop5: detected capacity change from 0 to 512 [ 192.554200][T11794] EXT4-fs mount: 43 callbacks suppressed [ 192.554220][T11794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.592798][T11794] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.631880][T11800] loop7: detected capacity change from 0 to 1024 [ 192.661327][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.678645][T11800] EXT4-fs: Ignoring removed orlov option [ 192.703016][T11800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.757320][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.772528][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.814705][T11808] loop5: detected capacity change from 0 to 1024 [ 192.828662][T11808] EXT4-fs: Ignoring removed orlov option [ 192.834854][T11808] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 192.845033][T11810] loop7: detected capacity change from 0 to 1024 [ 192.851741][T11810] EXT4-fs: Ignoring removed orlov option [ 192.859347][T11808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.863492][T11812] validate_nla: 10 callbacks suppressed [ 192.863510][T11812] netlink: 'syz.6.2976': attribute type 10 has an invalid length. [ 192.989621][T11810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.022369][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.092935][T11823] loop7: detected capacity change from 0 to 1024 [ 193.129649][T11823] EXT4-fs: Ignoring removed orlov option [ 193.218934][T11823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.329063][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.394308][T11829] loop7: detected capacity change from 0 to 128 [ 193.411179][T11829] EXT4-fs: inline encryption not supported [ 193.423201][T11829] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 193.999779][ T5607] Bluetooth: hci0: command 0x1003 tx timeout [ 194.005880][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.311024][T11836] netlink: 'syz.7.2983': attribute type 2 has an invalid length. [ 194.318916][T11836] netlink: 'syz.7.2983': attribute type 2 has an invalid length. [ 194.326653][T11836] netlink: 'syz.7.2983': attribute type 1 has an invalid length. [ 194.334516][T11836] __nla_validate_parse: 5 callbacks suppressed [ 194.334528][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2983'. [ 194.364688][T11837] hub 9-0:1.0: USB hub found [ 194.369433][T11837] hub 9-0:1.0: 8 ports detected [ 194.401136][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2984'. [ 194.429493][T11841] loop7: detected capacity change from 0 to 512 [ 194.454781][T11842] loop6: detected capacity change from 0 to 512 [ 194.461674][T11842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.469061][T11842] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 194.478929][T11842] EXT4-fs (loop6): invalid inodes per group: 196640 [ 194.478929][T11842] [ 194.490399][T11841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.508384][T11841] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.551303][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.577281][T11848] loop7: detected capacity change from 0 to 16384 [ 194.588566][T11846] loop6: detected capacity change from 0 to 1024 [ 194.598555][T11846] EXT4-fs: Ignoring removed orlov option [ 194.641510][T11846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.720483][T11856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2990'. [ 194.730037][T11856] netlink: 'syz.0.2990': attribute type 10 has an invalid length. [ 194.763524][T11852] loop7: detected capacity change from 16384 to 0 [ 194.772905][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.782714][ C0] I/O error, dev loop7, sector 6912 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 194.863639][T11865] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=11865 comm=wÞ£ÿ [ 194.928600][T11865] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.965793][T11874] loop7: detected capacity change from 0 to 1024 [ 194.982845][T11874] EXT4-fs: Ignoring removed orlov option [ 195.019598][T11874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.046721][T11879] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=11879 comm=wÞ£ÿ [ 195.079381][T11881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3001'. [ 195.096149][T11881] netlink: 'syz.1.3001': attribute type 10 has an invalid length. [ 195.122183][T11879] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.131964][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.163159][T11886] loop6: detected capacity change from 0 to 1024 [ 195.171684][T11886] EXT4-fs: Ignoring removed orlov option [ 195.181336][T11886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.221914][T11892] netlink: 'syz.7.3003': attribute type 2 has an invalid length. [ 195.229871][T11892] netlink: 'syz.7.3003': attribute type 2 has an invalid length. [ 195.237671][T11892] netlink: 'syz.7.3003': attribute type 1 has an invalid length. [ 195.245491][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3003'. [ 195.258731][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.308501][T11896] loop7: detected capacity change from 0 to 16384 [ 195.324537][T11892] hub 9-0:1.0: USB hub found [ 195.329351][T11892] hub 9-0:1.0: 8 ports detected [ 195.418290][T11906] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3012'. [ 195.431704][T11906] loop6: detected capacity change from 0 to 512 [ 195.438512][T11906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.445567][T11906] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 195.455549][T11906] EXT4-fs (loop6): invalid inodes per group: 196640 [ 195.455549][T11906] [ 195.464794][T11903] loop7: detected capacity change from 16384 to 0 [ 195.472293][ C1] I/O error, dev loop7, sector 7040 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 195.545110][T11914] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.629709][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3015'. [ 195.653558][T11923] loop6: detected capacity change from 0 to 1024 [ 195.673349][T11923] EXT4-fs: Ignoring removed orlov option [ 195.710249][T11923] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.747217][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 195.747235][ T29] audit: type=1326 audit(1760222583.249:16057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.6.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 195.790149][T11934] loop7: detected capacity change from 0 to 128 [ 195.796816][T11934] EXT4-fs: inline encryption not supported [ 195.818901][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.841422][T11934] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 195.862130][ T29] audit: type=1326 audit(1760222583.279:16058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.6.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 195.885894][ T29] audit: type=1326 audit(1760222583.279:16059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11921 comm="syz.6.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 195.914477][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.935982][T11940] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3023'. [ 195.947619][T11940] netlink: 'syz.6.3023': attribute type 10 has an invalid length. [ 195.956169][T11938] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.002506][T11946] loop7: detected capacity change from 0 to 16384 [ 196.010057][T11948] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3028'. [ 196.035626][T11948] loop6: detected capacity change from 0 to 512 [ 196.045141][T11950] loop5: detected capacity change from 0 to 1024 [ 196.051923][T11948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.059061][T11950] EXT4-fs: Ignoring removed orlov option [ 196.065447][T11948] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 196.075358][T11948] EXT4-fs (loop6): invalid inodes per group: 196640 [ 196.075358][T11948] [ 196.096169][T11950] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.138908][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 196.151173][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.168374][T11951] loop7: detected capacity change from 16384 to 0 [ 196.175114][ C0] I/O error, dev loop7, sector 9728 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 2 [ 196.223939][T11963] loop6: detected capacity change from 0 to 1024 [ 196.230677][T11961] loop5: detected capacity change from 0 to 1024 [ 196.231319][T11963] EXT4-fs: Ignoring removed orlov option [ 196.237535][T11961] EXT4-fs: Ignoring removed orlov option [ 196.260365][T11963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.260365][T11961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.298255][ T29] audit: type=1326 audit(1760222583.799:16060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.6.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 196.322019][ T29] audit: type=1326 audit(1760222583.799:16061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.6.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 196.347834][ T29] audit: type=1326 audit(1760222583.809:16062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.6.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 196.356446][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.371505][ T29] audit: type=1326 audit(1760222583.809:16063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.6.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 196.404208][ T29] audit: type=1326 audit(1760222583.809:16064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11962 comm="syz.6.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 196.436639][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.449618][T11976] hub 9-0:1.0: USB hub found [ 196.454369][T11976] hub 9-0:1.0: 8 ports detected [ 196.459966][T11978] program syz.0.3038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.493076][T11980] loop6: detected capacity change from 0 to 512 [ 196.521068][T11986] loop5: detected capacity change from 0 to 1024 [ 196.528362][T11986] EXT4-fs: Ignoring removed orlov option [ 196.535397][T11980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.549279][T11980] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.561350][T11986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.623187][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.625094][T11992] loop7: detected capacity change from 0 to 512 [ 196.635621][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.639086][T11992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.654532][T11992] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 196.664481][T11992] EXT4-fs (loop7): invalid inodes per group: 196640 [ 196.664481][T11992] [ 196.695794][T11997] loop5: detected capacity change from 0 to 1024 [ 196.702752][T11997] EXT4-fs: Ignoring removed orlov option [ 196.720994][T11999] loop6: detected capacity change from 0 to 1024 [ 196.727907][T11999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.737250][T11997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.751823][T11999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.784795][T11999] ipvlan2: entered promiscuous mode [ 196.794084][T11999] bridge0: port 3(ipvlan2) entered blocking state [ 196.800748][T11999] bridge0: port 3(ipvlan2) entered disabled state [ 196.807484][T11999] ipvlan2: entered allmulticast mode [ 196.807732][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.812842][T11999] bridge0: entered allmulticast mode [ 196.813426][T11999] ipvlan2: left allmulticast mode [ 196.832386][T11999] bridge0: left allmulticast mode [ 196.839662][ T29] audit: type=1400 audit(1760222584.339:16065): avc: denied { setattr } for pid=11998 comm="syz.6.3045" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.862333][ T29] audit: type=1400 audit(1760222584.339:16066): avc: denied { connect } for pid=11998 comm="syz.6.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 196.925254][T12015] hub 9-0:1.0: USB hub found [ 196.929955][T12015] hub 9-0:1.0: 8 ports detected [ 196.960068][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.984641][T12017] program syz.0.3050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.021673][T12024] loop6: detected capacity change from 0 to 512 [ 197.043026][T12024] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.056409][T12024] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.075170][T12028] loop5: detected capacity change from 0 to 1024 [ 197.082009][T12028] EXT4-fs: Ignoring removed orlov option [ 197.105477][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.150737][T12028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.194412][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.230149][T12041] loop6: detected capacity change from 0 to 512 [ 197.236876][T12041] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.245004][T12041] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.245834][T12044] loop7: detected capacity change from 0 to 16384 [ 197.254894][T12041] EXT4-fs (loop6): invalid inodes per group: 196640 [ 197.254894][T12041] [ 197.349754][T12051] hub 9-0:1.0: USB hub found [ 197.356235][T12051] hub 9-0:1.0: 8 ports detected [ 197.438473][T12048] loop7: detected capacity change from 16384 to 0 [ 197.469040][T12061] program syz.6.3063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.551549][T12071] loop6: detected capacity change from 0 to 1024 [ 197.558136][T12071] EXT4-fs: Ignoring removed orlov option [ 197.570163][T12071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.596694][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.622477][T12076] loop6: detected capacity change from 0 to 1024 [ 197.629539][T12076] EXT4-fs: Ignoring removed orlov option [ 197.665993][T12076] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.693802][T12085] loop5: detected capacity change from 0 to 512 [ 197.700581][T12085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.707635][T12085] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.717523][T12085] EXT4-fs (loop5): invalid inodes per group: 196640 [ 197.717523][T12085] [ 197.739708][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.753379][T12087] hub 9-0:1.0: USB hub found [ 197.758138][T12087] hub 9-0:1.0: 8 ports detected [ 197.766761][T12089] loop6: detected capacity change from 0 to 1024 [ 197.774171][T12089] EXT4-fs: Ignoring removed orlov option [ 197.790129][T12089] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.818924][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.837672][T12097] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.894815][T12107] loop7: detected capacity change from 0 to 512 [ 197.901831][T12107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 197.918406][T12107] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 197.928314][T12107] EXT4-fs (loop7): invalid inodes per group: 196640 [ 197.928314][T12107] [ 197.943565][T12111] validate_nla: 16 callbacks suppressed [ 197.943645][T12111] netlink: 'syz.5.3086': attribute type 10 has an invalid length. [ 198.010330][T12117] netlink: 'syz.5.3088': attribute type 2 has an invalid length. [ 198.018136][T12117] netlink: 'syz.5.3088': attribute type 2 has an invalid length. [ 198.026163][T12117] netlink: 'syz.5.3088': attribute type 1 has an invalid length. [ 198.069589][T12123] hub 9-0:1.0: USB hub found [ 198.075293][T12123] hub 9-0:1.0: 8 ports detected [ 198.132078][T12129] loop5: detected capacity change from 0 to 1024 [ 198.148955][T12129] EXT4-fs: Ignoring removed orlov option [ 198.159037][T12133] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.170582][T12129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.209141][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.252820][T12139] loop5: detected capacity change from 0 to 1024 [ 198.266004][T12139] EXT4-fs: Ignoring removed orlov option [ 198.293304][T12139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.319911][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.350195][T12148] netlink: 'syz.1.3100': attribute type 10 has an invalid length. [ 198.370411][T12150] loop5: detected capacity change from 0 to 512 [ 198.377560][T12150] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 198.387669][T12152] netlink: 'syz.1.3102': attribute type 2 has an invalid length. [ 198.395692][T12152] netlink: 'syz.1.3102': attribute type 2 has an invalid length. [ 198.397622][T12150] EXT4-fs (loop5): 1 truncate cleaned up [ 198.403521][T12152] netlink: 'syz.1.3102': attribute type 1 has an invalid length. [ 198.408017][T12152] hub 9-0:1.0: USB hub found [ 198.409935][T12150] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.417148][T12152] hub 9-0:1.0: 8 ports detected [ 198.789308][T12182] loop7: detected capacity change from 0 to 1024 [ 198.796117][T12182] EXT4-fs: Ignoring removed orlov option [ 198.811052][T12182] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.848593][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.894163][T12194] loop6: detected capacity change from 0 to 1024 [ 198.908066][T12194] EXT4-fs: Ignoring removed orlov option [ 198.921017][T12194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.929591][T12200] loop7: detected capacity change from 0 to 1024 [ 198.940093][T12200] EXT4-fs: Ignoring removed orlov option [ 198.954252][T12200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.986685][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.002760][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.034674][T12209] loop6: detected capacity change from 0 to 512 [ 199.041830][T12209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.049052][T12209] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 199.059015][T12209] EXT4-fs (loop6): invalid inodes per group: 196640 [ 199.059015][T12209] [ 199.077682][T12212] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.163086][T12222] netlink: 'syz.0.3131': attribute type 10 has an invalid length. [ 199.287048][ T8512] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.453410][T12237] __nla_validate_parse: 27 callbacks suppressed [ 199.453432][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 199.663759][T12243] loop5: detected capacity change from 0 to 512 [ 199.760101][T12248] loop5: detected capacity change from 0 to 1024 [ 199.774516][T12248] EXT4-fs: Ignoring removed orlov option [ 199.788245][T12248] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 199.843020][T12252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3143'. [ 199.853095][T12252] netlink: 'syz.0.3143': attribute type 10 has an invalid length. [ 199.878673][T12248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.046174][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3145'. [ 200.071285][T12263] hub 9-0:1.0: USB hub found [ 200.077412][T12263] hub 9-0:1.0: 8 ports detected [ 200.113221][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3151'. [ 200.349647][T12277] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3154'. [ 200.448447][T12284] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3157'. [ 200.496139][T12284] loop6: detected capacity change from 0 to 512 [ 200.569095][T12284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 200.583798][T12284] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 200.593797][T12284] EXT4-fs (loop6): invalid inodes per group: 196640 [ 200.593797][T12284] [ 200.694683][T12295] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3161'. [ 200.721357][T12295] hub 9-0:1.0: USB hub found [ 200.726329][T12295] hub 9-0:1.0: 8 ports detected [ 200.735273][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3162'. [ 200.863981][T12305] loop7: detected capacity change from 0 to 1024 [ 200.888567][T12305] EXT4-fs: Ignoring removed orlov option [ 200.924791][T12311] loop6: detected capacity change from 0 to 128 [ 200.941665][T12311] EXT4-fs: inline encryption not supported [ 200.951934][T12311] EXT4-fs (loop6): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 200.970223][T12305] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.020356][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 201.020376][ T29] audit: type=1326 audit(1760222588.519:16248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.7.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950e89eec9 code=0x7ffc0000 [ 201.050352][ T29] audit: type=1326 audit(1760222588.519:16249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.7.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f950e89eec9 code=0x7ffc0000 [ 201.074115][ T29] audit: type=1326 audit(1760222588.519:16250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.7.3164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950e89eec9 code=0x7ffc0000 [ 201.120225][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.298240][ T29] audit: type=1400 audit(1760222588.799:16251): avc: denied { mount } for pid=12318 comm="syz.7.3170" name="/" dev="ramfs" ino=38325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 201.323346][T12320] loop7: detected capacity change from 0 to 512 [ 201.344716][ T29] audit: type=1400 audit(1760222588.849:16252): avc: denied { mounton } for pid=12318 comm="syz.7.3170" path="/file0" dev="ramfs" ino=37581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 201.651496][T12329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3174'. [ 201.678636][T12329] hub 9-0:1.0: USB hub found [ 201.683500][T12329] hub 9-0:1.0: 8 ports detected [ 201.764899][T12333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3175'. [ 201.804896][T12335] loop7: detected capacity change from 0 to 512 [ 201.862650][T12335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.875397][T12335] ext4 filesystem being mounted at /136/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.921011][T10577] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.940302][T12344] loop6: detected capacity change from 0 to 1024 [ 201.958380][ T3392] Process accounting resumed [ 201.976665][T12344] EXT4-fs: Ignoring removed orlov option [ 201.983951][T12348] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.014671][T12344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.071533][ T29] audit: type=1326 audit(1760222589.569:16253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.6.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 202.095485][ T29] audit: type=1326 audit(1760222589.569:16254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.6.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 202.119532][ T29] audit: type=1326 audit(1760222589.569:16255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12343 comm="syz.6.3180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 202.166285][T10307] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.202525][T12356] hub 9-0:1.0: USB hub found [ 202.207269][T12356] hub 9-0:1.0: 8 ports detected [ 202.274405][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.343595][ T29] audit: type=1326 audit(1760222589.849:16256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.7.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950e89eec9 code=0x7ffc0000 [ 202.416894][T12362] loop7: detected capacity change from 0 to 128 [ 202.423354][ T29] audit: type=1326 audit(1760222589.849:16257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12359 comm="syz.7.3186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f950e89eec9 code=0x7ffc0000 [ 202.431497][T12362] EXT4-fs: inline encryption not supported [ 202.494136][T12362] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 203.025209][T12382] loop5: detected capacity change from 0 to 128 [ 203.035360][T12382] EXT4-fs: inline encryption not supported [ 203.041936][T12382] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 203.128497][T12388] validate_nla: 13 callbacks suppressed [ 203.128515][T12388] netlink: 'syz.1.3196': attribute type 10 has an invalid length. [ 203.373652][T12408] loop7: detected capacity change from 0 to 1024 [ 203.382366][T12408] EXT4-fs: Ignoring removed bh option [ 203.524303][T12418] netlink: 'syz.7.3209': attribute type 10 has an invalid length. [ 203.629115][T12427] loop7: detected capacity change from 0 to 1024 [ 203.635717][T12427] EXT4-fs: Ignoring removed orlov option [ 203.694828][T12436] loop7: detected capacity change from 0 to 128 [ 203.715166][T12436] EXT4-fs: inline encryption not supported [ 203.721759][T12436] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 203.985773][T12444] vhci_hcd: invalid port number 96 [ 203.991040][T12444] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 204.249476][T12469] netlink: 'syz.5.3231': attribute type 10 has an invalid length. [ 204.318750][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.324942][ T5607] Bluetooth: hci0: command 0x1003 tx timeout [ 204.359988][T12473] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.477431][T12478] __nla_validate_parse: 12 callbacks suppressed [ 204.477453][T12478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3235'. [ 204.505416][T12480] loop5: detected capacity change from 0 to 1024 [ 204.512289][T12480] EXT4-fs: Ignoring removed orlov option [ 204.555319][T12482] FAULT_INJECTION: forcing a failure. [ 204.555319][T12482] name failslab, interval 1, probability 0, space 0, times 0 [ 204.568125][T12482] CPU: 0 UID: 0 PID: 12482 Comm: syz.1.3237 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.568164][T12482] Tainted: [W]=WARN [ 204.568172][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.568187][T12482] Call Trace: [ 204.568261][T12482] [ 204.568352][T12482] __dump_stack+0x1d/0x30 [ 204.568377][T12482] dump_stack_lvl+0xe8/0x140 [ 204.568401][T12482] dump_stack+0x15/0x1b [ 204.568422][T12482] should_fail_ex+0x265/0x280 [ 204.568464][T12482] should_failslab+0x8c/0xb0 [ 204.568507][T12482] __kmalloc_noprof+0xa5/0x570 [ 204.568540][T12482] ? copy_splice_read+0xc2/0x660 [ 204.568647][T12482] copy_splice_read+0xc2/0x660 [ 204.568682][T12482] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 204.568773][T12482] splice_direct_to_actor+0x290/0x680 [ 204.568801][T12482] ? __pfx_direct_splice_actor+0x10/0x10 [ 204.568834][T12482] do_splice_direct+0xda/0x150 [ 204.568860][T12482] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 204.568904][T12482] do_sendfile+0x380/0x650 [ 204.568937][T12482] __x64_sys_sendfile64+0x105/0x150 [ 204.569063][T12482] x64_sys_call+0x2bb4/0x3000 [ 204.569093][T12482] do_syscall_64+0xd2/0x200 [ 204.569143][T12482] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 204.569182][T12482] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 204.569206][T12482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.569231][T12482] RIP: 0033:0x7f012b60eec9 [ 204.569248][T12482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.569274][T12482] RSP: 002b:00007f012a077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 204.569376][T12482] RAX: ffffffffffffffda RBX: 00007f012b865fa0 RCX: 00007f012b60eec9 [ 204.569394][T12482] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 204.569408][T12482] RBP: 00007f012a077090 R08: 0000000000000000 R09: 0000000000000000 [ 204.569487][T12482] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000002 [ 204.569565][T12482] R13: 00007f012b866038 R14: 00007f012b865fa0 R15: 00007fff75fc2718 [ 204.569591][T12482] [ 204.827683][T12489] loop7: detected capacity change from 0 to 1024 [ 204.842024][T12489] EXT4-fs: Ignoring removed orlov option [ 204.967645][T12505] loop5: detected capacity change from 0 to 512 [ 205.018932][T12505] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.329008][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3248'. [ 205.371023][T12503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12503 comm=syz.7.3244 [ 205.383595][T12503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12503 comm=syz.7.3244 [ 205.491751][T12523] loop7: detected capacity change from 0 to 1024 [ 205.505473][T12523] EXT4-fs: Ignoring removed orlov option [ 205.602924][T12536] IPVS: set_ctl: invalid protocol: 41 172.30.0.7:20003 [ 205.611885][T12540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3258'. [ 205.621046][T12540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3258'. [ 205.621642][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3259'. [ 205.663838][T12544] loop7: detected capacity change from 0 to 512 [ 205.670489][T12547] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3260'. [ 205.683609][T12547] loop6: detected capacity change from 0 to 512 [ 205.690299][T12544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.697252][T12544] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 205.707206][T12544] EXT4-fs (loop7): invalid inodes per group: 196640 [ 205.707206][T12544] [ 205.716773][T12547] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.730296][T12547] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 205.740188][T12547] EXT4-fs (loop6): invalid inodes per group: 196640 [ 205.740188][T12547] [ 205.750697][T12551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12551 comm=syz.5.3262 [ 205.763600][T12551] netlink: 'syz.5.3262': attribute type 1 has an invalid length. [ 205.789428][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3263'. [ 205.923908][T12565] loop7: detected capacity change from 0 to 1024 [ 205.930829][T12565] EXT4-fs: Ignoring removed orlov option [ 205.970007][T12572] loop5: detected capacity change from 0 to 1024 [ 205.982904][T12572] EXT4-fs: Ignoring removed orlov option [ 206.041944][T12576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3273'. [ 206.061170][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 206.061184][ T29] audit: type=1326 audit(1760222593.569:16395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 206.144249][ T29] audit: type=1326 audit(1760222593.599:16396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 206.167985][ T29] audit: type=1326 audit(1760222593.599:16397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12571 comm="syz.5.3271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 206.191873][ T29] audit: type=1400 audit(1760222593.649:16398): avc: denied { accept } for pid=12582 comm="syz.7.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.234555][T12590] netlink: 'syz.1.3277': attribute type 2 has an invalid length. [ 206.242374][T12590] netlink: 'syz.1.3277': attribute type 2 has an invalid length. [ 206.250236][T12590] netlink: 'syz.1.3277': attribute type 1 has an invalid length. [ 206.257976][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'. [ 206.277893][T12588] netlink: 'syz.7.3276': attribute type 15 has an invalid length. [ 206.317490][T12590] hub 9-0:1.0: USB hub found [ 206.322237][T12590] hub 9-0:1.0: 8 ports detected [ 206.333864][ T29] audit: type=1326 audit(1760222593.839:16399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.6.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 206.468274][ T29] audit: type=1326 audit(1760222593.869:16400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.6.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 206.492021][ T29] audit: type=1326 audit(1760222593.869:16401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.6.3281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 206.515616][ T29] audit: type=1326 audit(1760222593.929:16402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 206.539242][ T29] audit: type=1326 audit(1760222593.929:16403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 206.562938][ T29] audit: type=1326 audit(1760222593.929:16404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12605 comm="syz.1.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f012b60eec9 code=0x7ffc0000 [ 206.756611][T12620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3288'. [ 206.832728][T12631] netlink: 'syz.5.3293': attribute type 2 has an invalid length. [ 206.840572][T12631] netlink: 'syz.5.3293': attribute type 2 has an invalid length. [ 206.852548][T12631] hub 9-0:1.0: USB hub found [ 206.859090][T12631] hub 9-0:1.0: 8 ports detected [ 206.880430][T12634] loop7: detected capacity change from 0 to 512 [ 206.936542][T12644] loop6: detected capacity change from 0 to 1024 [ 206.947065][T12634] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.955850][T12644] EXT4-fs: Ignoring removed orlov option [ 206.964198][T12644] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 207.167345][T12668] hub 9-0:1.0: USB hub found [ 207.176223][T12668] hub 9-0:1.0: 8 ports detected [ 207.297120][T12665] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 207.304521][T12665] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 207.371551][T12665] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 207.768757][T12704] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.775797][T12705] hub 9-0:1.0: USB hub found [ 207.801576][T12705] hub 9-0:1.0: 8 ports detected [ 208.160251][T12727] x_tables: duplicate underflow at hook 4 [ 208.231712][T12729] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.263403][T12731] validate_nla: 11 callbacks suppressed [ 208.263420][T12731] netlink: 'syz.7.3333': attribute type 2 has an invalid length. [ 208.276918][T12731] netlink: 'syz.7.3333': attribute type 2 has an invalid length. [ 208.284686][T12731] netlink: 'syz.7.3333': attribute type 1 has an invalid length. [ 208.306091][T12731] hub 9-0:1.0: USB hub found [ 208.311678][T12731] hub 9-0:1.0: 8 ports detected [ 208.338352][T12734] hugetlbfs: Bad value 'e' for mount option 'size' [ 208.338352][T12734] [ 208.359275][T12737] netlink: 'syz.0.3335': attribute type 10 has an invalid length. [ 208.538082][T12751] loop5: detected capacity change from 0 to 128 [ 208.559095][T12751] EXT4-fs: inline encryption not supported [ 208.628267][T12751] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 208.648030][T12756] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.660126][T12754] ipvlan2: entered promiscuous mode [ 208.666500][T12754] bridge0: port 3(ipvlan2) entered blocking state [ 208.672984][T12754] bridge0: port 3(ipvlan2) entered disabled state [ 208.688887][T12759] loop7: detected capacity change from 0 to 512 [ 208.696873][T12754] ipvlan2: entered allmulticast mode [ 208.702309][T12754] bridge0: entered allmulticast mode [ 208.711061][T12760] netlink: 'syz.0.3343': attribute type 7 has an invalid length. [ 208.718848][T12760] netlink: 'syz.0.3343': attribute type 8 has an invalid length. [ 208.721356][T12754] ipvlan2: left allmulticast mode [ 208.731965][T12754] bridge0: left allmulticast mode [ 208.741920][T12759] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.770931][T12760] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 208.855462][T12769] netlink: 'syz.1.3348': attribute type 10 has an invalid length. [ 208.944557][T12780] loop7: detected capacity change from 0 to 1024 [ 208.955380][T12780] EXT4-fs: Ignoring removed orlov option [ 209.247216][T12806] netlink: 'syz.7.3362': attribute type 10 has an invalid length. [ 209.303045][T12810] netlink: 'syz.7.3364': attribute type 2 has an invalid length. [ 209.310920][T12810] netlink: 'syz.7.3364': attribute type 2 has an invalid length. [ 209.355327][T12810] hub 9-0:1.0: USB hub found [ 209.364921][T12810] hub 9-0:1.0: 8 ports detected [ 209.474592][T12813] loop7: detected capacity change from 0 to 512 [ 209.482748][T12813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.509211][T12813] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 209.519128][T12813] EXT4-fs (loop7): invalid inodes per group: 196640 [ 209.519128][T12813] [ 209.550991][T12818] __nla_validate_parse: 23 callbacks suppressed [ 209.551008][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3368'. [ 209.569744][T12818] loop5: detected capacity change from 0 to 512 [ 209.576366][T12818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.583549][T12818] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 209.593465][T12818] EXT4-fs (loop5): invalid inodes per group: 196640 [ 209.593465][T12818] [ 209.647813][T12825] loop5: detected capacity change from 0 to 2048 [ 209.728737][T12836] netlink: 352 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 209.731486][T12834] loop7: detected capacity change from 0 to 1024 [ 209.737645][T12836] netlink: 68 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 209.762632][T12836] netlink: 24 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 209.775649][T12836] IPVS: Error connecting to the multicast addr [ 209.788579][T12834] EXT4-fs: Ignoring removed orlov option [ 210.161697][T12848] loop7: detected capacity change from 0 to 128 [ 210.178334][T12848] EXT4-fs: inline encryption not supported [ 210.184459][T12848] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 210.447234][T12858] bridge0: entered promiscuous mode [ 210.452662][T12858] macvtap0: entered allmulticast mode [ 210.458073][T12858] bridge0: entered allmulticast mode [ 210.489727][T12858] bridge0: port 3(macvtap0) entered blocking state [ 210.496310][T12858] bridge0: port 3(macvtap0) entered disabled state [ 210.519474][T12858] bridge0: left allmulticast mode [ 210.524605][T12858] bridge0: left promiscuous mode [ 210.641562][T12875] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.663153][ T37] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.676064][T12878] loop7: detected capacity change from 0 to 512 [ 210.700276][ T37] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.737382][T12878] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.750084][ T37] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.760549][T12881] loop6: detected capacity change from 0 to 1024 [ 210.767387][T12881] EXT4-fs: Ignoring removed orlov option [ 210.819832][ T37] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.989132][T12864] chnl_net:caif_netlink_parms(): no params data found [ 211.060124][T12893] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3392'. [ 211.091967][ T37] bridge_slave_1: left allmulticast mode [ 211.097655][ T37] bridge_slave_1: left promiscuous mode [ 211.103390][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.104972][T12893] loop6: detected capacity change from 0 to 512 [ 211.118780][ T37] bridge_slave_0: left allmulticast mode [ 211.124519][ T37] bridge_slave_0: left promiscuous mode [ 211.128780][T12893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.130397][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.137187][T12893] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 211.153758][T12893] EXT4-fs (loop6): invalid inodes per group: 196640 [ 211.153758][T12893] [ 211.168565][T12899] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3393'. [ 211.331230][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.342376][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.353635][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3394'. [ 211.362774][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3394'. [ 211.372963][ T37] bond0 (unregistering): Released all slaves [ 211.382306][ T37] bond1 (unregistering): Released all slaves [ 211.392216][ T37] bond2 (unregistering): Released all slaves [ 211.399830][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 211.399844][ T29] audit: type=1326 audit(1760222598.909:16660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 211.431975][ T37] bond3 (unregistering): Released all slaves [ 211.442531][T12908] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 211.451510][ T29] audit: type=1326 audit(1760222598.909:16661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 211.452043][ T37] bond4 (unregistering): Released all slaves [ 211.475355][ T29] audit: type=1326 audit(1760222598.909:16662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 211.485309][ T37] bond5 (unregistering): Released all slaves [ 211.504796][ T29] audit: type=1326 audit(1760222598.909:16663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 211.504833][ T29] audit: type=1326 audit(1760222598.909:16664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12906 comm="syz.6.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 211.562567][ T37] bond6 (unregistering): Released all slaves [ 211.572606][ T37] bond7 (unregistering): Released all slaves [ 211.582551][ T37] bond8 (unregistering): Released all slaves [ 211.592417][ T37] bond9 (unregistering): Released all slaves [ 211.609873][T12901] ipvlan2: entered promiscuous mode [ 211.616568][T12901] bridge0: port 3(ipvlan2) entered blocking state [ 211.623683][T12901] bridge0: port 3(ipvlan2) entered disabled state [ 211.630970][T12901] ipvlan2: entered allmulticast mode [ 211.636334][T12901] bridge0: entered allmulticast mode [ 211.642414][T12901] ipvlan2: left allmulticast mode [ 211.647485][T12901] bridge0: left allmulticast mode [ 211.654013][ T29] audit: type=1400 audit(1760222599.159:16665): avc: denied { read } for pid=12912 comm="syz.6.3397" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.691567][ T29] audit: type=1400 audit(1760222599.159:16666): avc: denied { map } for pid=12912 comm="syz.6.3397" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.715746][ T29] audit: type=1400 audit(1760222599.159:16667): avc: denied { execute } for pid=12912 comm="syz.6.3397" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.748620][ T37] tipc: Left network mode [ 211.748863][T12864] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.760353][T12864] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.767691][T12864] bridge_slave_0: entered allmulticast mode [ 211.779907][T12864] bridge_slave_0: entered promiscuous mode [ 211.786902][T12864] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.794086][T12864] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.802139][T12864] bridge_slave_1: entered allmulticast mode [ 211.808913][T12864] bridge_slave_1: entered promiscuous mode [ 211.838242][ T29] audit: type=1326 audit(1760222599.339:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.7.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950e89eec9 code=0x7ffc0000 [ 211.861917][ T29] audit: type=1326 audit(1760222599.339:16669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12925 comm="syz.7.3401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f950e89eec9 code=0x7ffc0000 [ 211.902114][ T37] hsr_slave_0: left promiscuous mode [ 211.908509][T12935] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3404'. [ 211.917880][ T37] hsr_slave_1: left promiscuous mode [ 211.926703][T12935] loop6: detected capacity change from 0 to 512 [ 211.948778][ T37] veth1_vlan: left promiscuous mode [ 211.954114][ T37] veth0_vlan: left promiscuous mode [ 211.958758][T12935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 211.976599][T12935] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 211.986626][T12935] EXT4-fs (loop6): invalid inodes per group: 196640 [ 211.986626][T12935] [ 212.003346][T12943] loop5: detected capacity change from 0 to 512 [ 212.049208][T12943] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.074974][T12951] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.114877][ T37] team0 (unregistering): Port device team_slave_1 removed [ 212.126343][ T37] team0 (unregistering): Port device team_slave_0 removed [ 212.158181][T12958] loop5: detected capacity change from 0 to 128 [ 212.165441][T12958] EXT4-fs: inline encryption not supported [ 212.179325][T12955] vhci_hcd: invalid port number 96 [ 212.184474][T12955] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 212.209478][T12958] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 212.238643][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3415'. [ 212.250719][T12969] FAULT_INJECTION: forcing a failure. [ 212.250719][T12969] name failslab, interval 1, probability 0, space 0, times 0 [ 212.263458][T12969] CPU: 1 UID: 0 PID: 12969 Comm: syz.7.3418 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.263494][T12969] Tainted: [W]=WARN [ 212.263502][T12969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.263540][T12969] Call Trace: [ 212.263548][T12969] [ 212.263557][T12969] __dump_stack+0x1d/0x30 [ 212.263583][T12969] dump_stack_lvl+0xe8/0x140 [ 212.263610][T12969] dump_stack+0x15/0x1b [ 212.263628][T12969] should_fail_ex+0x265/0x280 [ 212.263669][T12969] should_failslab+0x8c/0xb0 [ 212.263705][T12969] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 212.263778][T12969] ? security_context_to_sid_core+0x69/0x3b0 [ 212.263816][T12969] kmemdup_nul+0x36/0xc0 [ 212.263878][T12969] security_context_to_sid_core+0x69/0x3b0 [ 212.263915][T12969] ? avc_has_perm_noaudit+0x1b1/0x200 [ 212.264026][T12969] security_context_to_sid+0x2e/0x40 [ 212.264191][T12969] selinux_lsm_setattr+0x2dc/0x660 [ 212.264229][T12969] selinux_setprocattr+0x4f/0x70 [ 212.264272][T12969] security_setprocattr+0x1a7/0x1d0 [ 212.264325][T12969] proc_pid_attr_write+0x1eb/0x220 [ 212.264365][T12969] vfs_writev+0x406/0x8b0 [ 212.264397][T12969] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 212.264518][T12969] ? mutex_lock+0xd/0x30 [ 212.264608][T12969] do_writev+0xe7/0x210 [ 212.264660][T12969] __x64_sys_writev+0x45/0x50 [ 212.264691][T12969] x64_sys_call+0x1e9a/0x3000 [ 212.264719][T12969] do_syscall_64+0xd2/0x200 [ 212.264812][T12969] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.264839][T12969] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.264868][T12969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.264897][T12969] RIP: 0033:0x7f950e89eec9 [ 212.265019][T12969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.265044][T12969] RSP: 002b:00007f950d307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 212.265065][T12969] RAX: ffffffffffffffda RBX: 00007f950eaf5fa0 RCX: 00007f950e89eec9 [ 212.265078][T12969] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 212.265154][T12969] RBP: 00007f950d307090 R08: 0000000000000000 R09: 0000000000000000 [ 212.265170][T12969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.265239][T12969] R13: 00007f950eaf6038 R14: 00007f950eaf5fa0 R15: 00007fff922c7f38 [ 212.265276][T12969] [ 212.310154][T12864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.422650][T12978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12978 comm=syz.0.3419 [ 212.487077][T12975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.531717][T12975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.556732][T12975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.566673][T12975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.579288][T12864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.643573][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.650804][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.704978][T12984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.716359][T12984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.824580][ T68] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.834299][T12864] team0: Port device team_slave_0 added [ 212.847461][T12864] team0: Port device team_slave_1 added [ 212.857670][ T68] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.860834][T12999] Invalid logical block size (3) [ 212.884472][ T68] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.902281][T12864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.909288][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.935242][T12864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.938309][T13001] FAULT_INJECTION: forcing a failure. [ 212.938309][T13001] name failslab, interval 1, probability 0, space 0, times 0 [ 212.946526][ T68] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.958670][T13001] CPU: 0 UID: 0 PID: 13001 Comm: syz.5.3427 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.958711][T13001] Tainted: [W]=WARN [ 212.958720][T13001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.958764][T13001] Call Trace: [ 212.958773][T13001] [ 212.958784][T13001] __dump_stack+0x1d/0x30 [ 212.958871][T13001] dump_stack_lvl+0xe8/0x140 [ 212.958906][T13001] dump_stack+0x15/0x1b [ 212.958930][T13001] should_fail_ex+0x265/0x280 [ 212.959047][T13001] should_failslab+0x8c/0xb0 [ 212.959085][T13001] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 212.959128][T13001] ? sidtab_sid2str_get+0xa0/0x130 [ 212.959238][T13001] kmemdup_noprof+0x2b/0x70 [ 212.959273][T13001] sidtab_sid2str_get+0xa0/0x130 [ 212.959317][T13001] security_sid_to_context_core+0x1eb/0x2e0 [ 212.959439][T13001] security_sid_to_context+0x27/0x40 [ 212.959556][T13001] selinux_lsmprop_to_secctx+0x67/0xf0 [ 212.959595][T13001] security_lsmprop_to_secctx+0x1a0/0x1c0 [ 212.959647][T13001] audit_log_subj_ctx+0xa4/0x3e0 [ 212.959674][T13001] ? skb_put+0xa9/0xf0 [ 212.959723][T13001] audit_log_task_context+0x48/0x70 [ 212.959827][T13001] audit_log_task+0xf4/0x250 [ 212.959877][T13001] ? kstrtouint+0x76/0xc0 [ 212.959930][T13001] audit_seccomp+0x61/0x100 [ 212.960000][T13001] ? __seccomp_filter+0x82d/0x1250 [ 212.960044][T13001] __seccomp_filter+0x83e/0x1250 [ 212.960083][T13001] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 212.960124][T13001] ? vfs_write+0x7e8/0x960 [ 212.960210][T13001] ? __rcu_read_unlock+0x4f/0x70 [ 212.960249][T13001] ? __fget_files+0x184/0x1c0 [ 212.960315][T13001] __secure_computing+0x82/0x150 [ 212.960351][T13001] syscall_trace_enter+0xcf/0x1e0 [ 212.960435][T13001] do_syscall_64+0xac/0x200 [ 212.960526][T13001] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.960565][T13001] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.960595][T13001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.960667][T13001] RIP: 0033:0x7f7796e3eec9 [ 212.960688][T13001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.960783][T13001] RSP: 002b:00007f779589f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 212.960810][T13001] RAX: ffffffffffffffda RBX: 00007f7797095fa0 RCX: 00007f7796e3eec9 [ 212.960828][T13001] RDX: 0000000000004007 RSI: 0000000000000000 RDI: 0000000000000003 [ 212.960846][T13001] RBP: 00007f779589f090 R08: 0000000000000000 R09: 0000000000000000 [ 212.960864][T13001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.960908][T13001] R13: 00007f7797096038 R14: 00007f7797095fa0 R15: 00007ffc7bcc4b38 [ 212.961004][T13001] [ 213.087738][T13007] loop7: detected capacity change from 0 to 512 [ 213.171403][T13011] loop5: detected capacity change from 0 to 1024 [ 213.181178][T13007] ext4: Unknown parameter 'dont_appraise' [ 213.190074][T13011] EXT4-fs: Ignoring removed orlov option [ 213.260437][T12864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.267501][T12864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.293592][T12864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.361241][T12864] hsr_slave_0: entered promiscuous mode [ 213.367484][T12864] hsr_slave_1: entered promiscuous mode [ 213.378065][T12864] debugfs: 'hsr0' already exists in 'hsr' [ 213.383887][T12864] Cannot create hsr debugfs directory [ 213.416344][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 213.444967][T13025] validate_nla: 6 callbacks suppressed [ 213.445063][T13025] netlink: 'syz.7.3436': attribute type 10 has an invalid length. [ 213.602599][T13038] bridge_slave_0: left promiscuous mode [ 213.608496][T13038] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.626288][T13038] bridge_slave_1: left allmulticast mode [ 213.632071][T13038] bridge_slave_1: left promiscuous mode [ 213.637870][T13038] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.648827][T13040] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.659190][T13038] bond0: (slave bond_slave_0): Releasing backup interface [ 213.669740][T13038] bond0: (slave bond_slave_1): Releasing backup interface [ 213.693758][T13038] team_slave_0: left promiscuous mode [ 213.702939][T13038] team0: Port device team_slave_0 removed [ 213.718990][T13038] team_slave_1: left promiscuous mode [ 213.728168][T13038] team0: Port device team_slave_1 removed [ 213.744124][T13038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.767779][T13041] team0: Mode changed to "loadbalance" [ 213.808173][T13056] netlink: 'syz.7.3446': attribute type 10 has an invalid length. [ 213.966236][T12864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.975318][T12864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.984138][T12864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.993388][T12864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 214.043384][T12864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.056517][T12864] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.066729][T11629] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.073888][T11629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.085914][T11629] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.093011][T11629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.193988][T12864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.269507][T12864] veth0_vlan: entered promiscuous mode [ 214.277935][T12864] veth1_vlan: entered promiscuous mode [ 214.296067][T12864] veth0_macvtap: entered promiscuous mode [ 214.304894][T12864] veth1_macvtap: entered promiscuous mode [ 214.316574][T12864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.331342][T12864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.353126][ T1724] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.362113][ T1724] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.375267][ T1724] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.404615][ T1724] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.585884][T13111] FAULT_INJECTION: forcing a failure. [ 214.585884][T13111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.599278][T13111] CPU: 0 UID: 0 PID: 13111 Comm: syz.5.3456 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.599322][T13111] Tainted: [W]=WARN [ 214.599341][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 214.599358][T13111] Call Trace: [ 214.599366][T13111] [ 214.599377][T13111] __dump_stack+0x1d/0x30 [ 214.599405][T13111] dump_stack_lvl+0xe8/0x140 [ 214.599431][T13111] dump_stack+0x15/0x1b [ 214.599449][T13111] should_fail_ex+0x265/0x280 [ 214.599503][T13111] should_fail+0xb/0x20 [ 214.599607][T13111] should_fail_usercopy+0x1a/0x20 [ 214.599635][T13111] _copy_from_user+0x1c/0xb0 [ 214.599667][T13111] ___sys_sendmsg+0xc1/0x1d0 [ 214.599725][T13111] __x64_sys_sendmsg+0xd4/0x160 [ 214.599797][T13111] x64_sys_call+0x191e/0x3000 [ 214.599826][T13111] do_syscall_64+0xd2/0x200 [ 214.599850][T13111] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 214.599880][T13111] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 214.599909][T13111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.599980][T13111] RIP: 0033:0x7f7796e3eec9 [ 214.600001][T13111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.600025][T13111] RSP: 002b:00007f779589f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.600052][T13111] RAX: ffffffffffffffda RBX: 00007f7797095fa0 RCX: 00007f7796e3eec9 [ 214.600133][T13111] RDX: 0000000000000084 RSI: 00002000000001c0 RDI: 0000000000000004 [ 214.600150][T13111] RBP: 00007f779589f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.600189][T13111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.600206][T13111] R13: 00007f7797096038 R14: 00007f7797095fa0 R15: 00007ffc7bcc4b38 [ 214.600231][T13111] [ 214.816848][T13114] loop7: detected capacity change from 0 to 128 [ 214.892543][T13124] loop7: detected capacity change from 0 to 128 [ 214.906036][T13124] EXT4-fs: inline encryption not supported [ 214.922184][T13124] EXT4-fs (loop7): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 214.960249][T13130] __nla_validate_parse: 8 callbacks suppressed [ 214.960264][T13130] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3465'. [ 215.001620][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3466'. [ 215.428476][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.728613][T13164] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3478'. [ 215.743764][T13164] netlink: 'syz.1.3478': attribute type 10 has an invalid length. [ 215.844142][T13181] netlink: 'syz.7.3486': attribute type 13 has an invalid length. [ 215.888959][T13181] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.896301][T13181] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.941018][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3499'. [ 215.964129][T13181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.976317][T13181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.053861][T13194] loop5: detected capacity change from 0 to 8192 [ 216.079774][T13206] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 216.090419][T13206] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 216.116339][ T37] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.125673][ T37] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.144643][T11625] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.165824][T11625] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.269870][T13213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13213 comm=syz.7.3496 [ 216.877964][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 216.877982][ T29] audit: type=1326 audit(1760222604.379:17003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 216.908856][ T29] audit: type=1326 audit(1760222604.379:17004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 216.932518][ T29] audit: type=1326 audit(1760222604.379:17005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.6.3498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff221b0eec9 code=0x7ffc0000 [ 216.956616][T13220] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3500'. [ 216.972979][T13220] netlink: 'syz.6.3500': attribute type 10 has an invalid length. [ 217.009814][ T29] audit: type=1400 audit(1760222604.519:17006): avc: denied { read write } for pid=13223 comm="syz.5.3497" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.034103][ T29] audit: type=1400 audit(1760222604.519:17007): avc: denied { open } for pid=13223 comm="syz.5.3497" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.058095][ T29] audit: type=1400 audit(1760222604.519:17008): avc: denied { ioctl } for pid=13223 comm="syz.5.3497" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 217.093432][T13231] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3504'. [ 217.105484][T13231] loop6: detected capacity change from 0 to 512 [ 217.112441][T13231] EXT4-fs: Ignoring removed nomblk_io_submit option [ 217.119560][T13231] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 217.129592][T13231] EXT4-fs (loop6): invalid inodes per group: 196640 [ 217.129592][T13231] [ 217.186086][T13242] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.208300][ T29] audit: type=1326 audit(1760222604.709:17009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.5.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 217.232010][ T29] audit: type=1326 audit(1760222604.709:17010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.5.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 217.255985][ T29] audit: type=1326 audit(1760222604.709:17011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.5.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 217.279748][ T29] audit: type=1326 audit(1760222604.709:17012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13244 comm="syz.5.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7796e3eec9 code=0x7ffc0000 [ 217.445858][T13273] team0: No ports can be present during mode change [ 217.452736][T13275] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.452878][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3517'. [ 217.500611][T13273] team0 (unregistering): Port device team_slave_0 removed [ 217.529879][T13273] team0 (unregistering): Port device team_slave_1 removed [ 217.872914][T13304] loop5: detected capacity change from 0 to 512 [ 217.884808][T13305] netlink: 5468 bytes leftover after parsing attributes in process `syz.6.3526'. [ 217.908534][T13304] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 217.926747][T13304] EXT4-fs (loop5): invalid journal inode [ 217.932596][T13304] EXT4-fs (loop5): can't get journal size [ 217.939187][T13304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 217.947260][T13304] System zones: 1-12, 13-13 [ 217.953342][T13304] EXT4-fs (loop5): 1 truncate cleaned up [ 217.964189][T13304] SELinux: policydb version 0 does not match my version range 15-35 [ 217.972863][T13304] SELinux: failed to load policy [ 218.001728][T13309] loop5: detected capacity change from 0 to 764 [ 218.016507][T13309] rock: directory entry would overflow storage [ 218.022750][T13309] rock: sig=0x4f50, size=4, remaining=3 [ 218.028368][T13309] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 218.375789][T13328] loop5: detected capacity change from 0 to 1024 [ 218.383400][T13328] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size [ 218.543403][T13334] netlink: 'syz.5.3542': attribute type 2 has an invalid length. [ 218.551257][T13334] netlink: 'syz.5.3542': attribute type 2 has an invalid length. [ 218.559016][T13334] netlink: 'syz.5.3542': attribute type 1 has an invalid length. [ 218.566754][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3542'. [ 218.581433][T13334] hub 9-0:1.0: USB hub found [ 218.590036][T13334] hub 9-0:1.0: 8 ports detected [ 218.633003][T13339] loop6: detected capacity change from 0 to 1024 [ 218.658826][T13339] EXT4-fs: Ignoring removed orlov option [ 218.814520][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3546'. [ 218.884606][T13349] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.010278][T13361] loop5: detected capacity change from 0 to 512 [ 219.017109][T13361] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.024661][T13361] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 219.034639][T13361] EXT4-fs (loop5): invalid inodes per group: 196640 [ 219.034639][T13361] [ 219.043742][ T3651] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 219.192158][T13370] loop5: detected capacity change from 0 to 1024 [ 219.198928][T13370] EXT4-fs: Ignoring removed orlov option [ 219.311207][T13379] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.506296][T13392] loop7: detected capacity change from 0 to 1024 [ 219.517429][T13392] EXT4-fs: Ignoring removed orlov option [ 219.523337][T13392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.635601][T13401] loop7: detected capacity change from 0 to 512 [ 219.644245][T13401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.653137][T13401] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 219.663254][T13401] EXT4-fs (loop7): invalid inodes per group: 196640 [ 219.663254][T13401] [ 219.727881][ T3392] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 219.736955][ T3392] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 219.748582][T13409] 9pnet_virtio: no channels available for device 127.0.0.1 [ 219.999188][T13430] netlink: 'syz.7.3580': attribute type 2 has an invalid length. [ 220.006982][T13430] netlink: 'syz.7.3580': attribute type 2 has an invalid length. [ 220.014751][T13430] netlink: 'syz.7.3580': attribute type 1 has an invalid length. [ 220.022599][T13430] __nla_validate_parse: 2 callbacks suppressed [ 220.022617][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3580'. [ 220.053206][T13430] hub 9-0:1.0: USB hub found [ 220.057944][T13430] hub 9-0:1.0: 8 ports detected [ 220.104015][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3584'. [ 220.113427][T13438] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3584'. [ 220.289787][T13459] netlink: 'syz.0.3594': attribute type 2 has an invalid length. [ 220.297599][T13459] netlink: 'syz.0.3594': attribute type 2 has an invalid length. [ 220.305396][T13459] netlink: 'syz.0.3594': attribute type 1 has an invalid length. [ 220.313309][T13459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3594'. [ 220.332985][T13459] hub 9-0:1.0: USB hub found [ 220.347078][T13459] hub 9-0:1.0: 8 ports detected [ 220.349879][T13464] x_tables: duplicate underflow at hook 1 [ 220.501792][T13487] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3607'. [ 220.512464][T13487] netlink: 'syz.0.3607': attribute type 10 has an invalid length. [ 220.590929][T13492] loop5: detected capacity change from 0 to 512 [ 220.597994][T13492] EXT4-fs: Ignoring removed nobh option [ 220.603914][T13492] ext4: Unknown parameter 'obj_role' [ 220.630809][T13492] loop5: detected capacity change from 0 to 2048 [ 220.684248][T13492] loop5: p2 p3 p7 [ 220.817236][T13492] FAULT_INJECTION: forcing a failure. [ 220.817236][T13492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.831164][T13492] CPU: 0 UID: 0 PID: 13492 Comm: syz.5.3609 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.831203][T13492] Tainted: [W]=WARN [ 220.831211][T13492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.831242][T13492] Call Trace: [ 220.831251][T13492] [ 220.831261][T13492] __dump_stack+0x1d/0x30 [ 220.831287][T13492] dump_stack_lvl+0xe8/0x140 [ 220.831313][T13492] dump_stack+0x15/0x1b [ 220.831335][T13492] should_fail_ex+0x265/0x280 [ 220.831436][T13492] should_fail+0xb/0x20 [ 220.831478][T13492] should_fail_usercopy+0x1a/0x20 [ 220.831505][T13492] _copy_from_iter+0xd2/0xe80 [ 220.831543][T13492] ? ___kmalloc_large_node+0x96/0x100 [ 220.831625][T13492] ? should_fail_ex+0xdb/0x280 [ 220.831670][T13492] copy_page_from_iter+0x178/0x2a0 [ 220.831705][T13492] process_vm_rw+0x659/0x960 [ 220.831760][T13492] ? __bpf_trace_sys_enter+0x10/0x30 [ 220.831850][T13492] __x64_sys_process_vm_writev+0x78/0x90 [ 220.831904][T13492] x64_sys_call+0x2a80/0x3000 [ 220.831931][T13492] do_syscall_64+0xd2/0x200 [ 220.831993][T13492] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 220.832019][T13492] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 220.832046][T13492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.832073][T13492] RIP: 0033:0x7f7796e3eec9 [ 220.832110][T13492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.832133][T13492] RSP: 002b:00007f779589f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 220.832158][T13492] RAX: ffffffffffffffda RBX: 00007f7797095fa0 RCX: 00007f7796e3eec9 [ 220.832174][T13492] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000392 [ 220.832191][T13492] RBP: 00007f779589f090 R08: 000000000000023a R09: 0000000000000000 [ 220.832207][T13492] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000002 [ 220.832270][T13492] R13: 00007f7797096038 R14: 00007f7797095fa0 R15: 00007ffc7bcc4b38 [ 220.832294][T13492] [ 221.038575][T13511] ================================================================== [ 221.046699][T13511] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 221.054113][T13511] [ 221.056451][T13511] write to 0xffff88810b951000 of 4096 bytes by task 13512 on cpu 0: [ 221.064448][T13511] _copy_from_iter+0x133/0xe80 [ 221.069237][T13511] copy_page_from_iter+0x178/0x2a0 [ 221.074368][T13511] process_vm_rw+0x659/0x960 [ 221.079002][T13511] __x64_sys_process_vm_writev+0x78/0x90 [ 221.084647][T13511] x64_sys_call+0x2a80/0x3000 [ 221.089345][T13511] do_syscall_64+0xd2/0x200 [ 221.093857][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.099759][T13511] [ 221.102090][T13511] write to 0xffff88810b951000 of 4096 bytes by task 13511 on cpu 1: [ 221.110071][T13511] _copy_from_iter+0x133/0xe80 [ 221.114847][T13511] copy_page_from_iter+0x178/0x2a0 [ 221.120055][T13511] process_vm_rw+0x659/0x960 [ 221.124657][T13511] __x64_sys_process_vm_writev+0x78/0x90 [ 221.130304][T13511] x64_sys_call+0x2a80/0x3000 [ 221.134998][T13511] do_syscall_64+0xd2/0x200 [ 221.139521][T13511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.145421][T13511] [ 221.147740][T13511] Reported by Kernel Concurrency Sanitizer on: [ 221.153892][T13511] CPU: 1 UID: 0 PID: 13511 Comm: syz.1.3613 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.165284][T13511] Tainted: [W]=WARN [ 221.169086][T13511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.179147][T13511] ==================================================================